[Ntop] Ports greater than 1024

[os10rules at gmail.com]

I know there is a web site which hosts the emails from that forum but I'm never able to find it when I need it. I'll post it here. Nobody had any answers or a fix, just some anecdotal info:

<QUOTE FROM WISPA FORUM>

Your observations regarding accuracy of NTOP may be similar to mine.  

You have to be careful that the data you are looking at matches the duration a specific client has been associated.  I've found if a customer power cycles the equipment, NTOP sees the connection as a new one.  Cumulative stats per IP may not be fairly stated.  It helps to reset the data first when you want to do a few day analysis.  If there is a different way, I'm listening.

Mike


At 06:26 PM 11/27/2009, you wrote:
> I believe the overview pages, but suspect the granular stats are bogus.  It will rank each IP by usage and give a total GB used by protocol.  IP/Summary/Traffic  The ranking also shows top users by percent of total BW used. 
> 
> Mike
> 
> At 06:03 PM 11/27/2009, you wrote:
>> Is it accurate?  I've had a hard time getting it to be accurate in other worlds (IP - ASN).
>>  
>>  
>> -----
>> Mike Hammett
>> 
>>  
>>  
>> 
>> Sent: Friday, November 27, 2009 5:52 PM
>> To: Mikrotik Users 
>> Subject: Re: [MT] Bandwidth transferred
>> 
>> NTOP
>> 
>> On Fri, Nov 27, 2009 at 4:14 PM, Mike 
>> Does anyone have an idea as to how to get MT to log how much a certain IP has transferred?  I have a customer that is looking to colo a server and pay per gigabyte transferred.  Can't do PPPoE\RADIUS with a server.  I don't like that a reboot would knock out a queue stat.
>>  

<END QUOTE>

On Nov 29, 2009, at 4:27 AM, Joseph Haig wrote:

> All I did was change MAX_ASSIGNED_IP_PORTS to 65536 from 1024 in
> globals-defines.h, as suggested by Gary.
> 
> I cannot find the WISPA forums - the closes I have found are some
> mailing lists but there are no posts with the subject "Bandwidth
> transferred" that I can find.  Do you have a direct link?
> 
> Thanks,
> 
> Joe
> 
> 2009/11/29  <os10rules at gmail.com>:
>> Did you find a source of info on how to do that or did you have to reinvent
>> the wheel? I need to do the same.
>> There's an interesting post just in the past few days on the
>> about inaccuracies in the NTOP accounting. You might be interested in that.
>> The subject line is Re: [MT] Bandwidth transferred
>> Greg
>> On Nov 28, 2009, at 6:50 PM, Joseph Haig wrote:
>> 
>> Thanks, I've compiled it with that changed now and I'll see how it
>> works.  As a suggestion to the developers, would it make sense to make
>> this a configurable option?
>> 
>> 2009/11/27 Gary Gatten <Ggatten at waddell.com>:
>> 
>> Good question. There is a directive in globals-defines.h to address this,
>> 
>> but you'd have to recompile. If you add it on the command line args it may
>> 
>> work. Actually, for 8080 it may already be included as "http"
>> 
>> ----- Original Message -----
>> 
>> From: ntop-bounces at listgateway.unipi.it <ntop-bounces at listgateway.unipi.it>
>> 
>> To: ntop at listgateway.unipi.it <ntop at listgateway.unipi.it>
>> 
>> Sent: Fri Nov 27 17:27:34 2009
>> 
>> Subject: [Ntop] Ports greater than 1024
>> 
>> I have just discovered ntop as I was looking for something for
>> 
>> detailed monitoring of my network.  Looking at the web interface under
>> 
>> "IP->Local->Ports Used" it appears that it is only monitoring ports
>> 
>> lower than 1024.  However, I have a web proxy on port 8080, access to
>> 
>> which I would also like to see, as well as any other higher ports that
>> 
>> may be used for file sharing software.  Is this possible?
>> 
>> Thanks,
>> 
>> oe
>> 
>> _______________________________________________
>> 
>> Ntop mailing list
>> 
>> Ntop at listgateway.unipi.it
>> 
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>> 
>> "This email is intended to be reviewed by only the intended recipient and
>> 
>> may contain information that is privileged and/or confidential. If you are
>> 
>> not the intended recipient, you are hereby notified that any review, use,
>> 
>> dissemination, disclosure or copying of this email and its attachments, if
>> 
>> any, is strictly prohibited. If you have received this email in error,
>> 
>> please immediately notify the sender by return email and delete this email
>> 
>> from your system."
>> 
>> _______________________________________________
>> 
>> Ntop mailing list
>> 
>> Ntop at listgateway.unipi.it
>> 
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>> 
>> 
>> _______________________________________________
>> Ntop mailing list
>> Ntop at listgateway.unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>> 
>> 
>> _______________________________________________
>> Ntop mailing list
>> Ntop at listgateway.unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>> 
>> 
> _______________________________________________
> Ntop mailing list
> Ntop at listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listgateway.unipi.it/pipermail/ntop/attachments/20091129/138e813c/attachment.htm>