[Ntop] how to monitor http and https only

Gary Gatten Ggatten at waddell.com
Mon Apr 26 17:34:42 CEST 2010


You can't disable "everything", but with packet and protocol filters, and by viewing specific reports - you can get pretty close to what you need.

----- Original Message -----
From: ntop-bounces at listgateway.unipi.it <ntop-bounces at listgateway.unipi.it>
To: ntop at unipi.it <ntop at unipi.it>
Sent: Mon Apr 26 09:31:35 2010
Subject: Re: [Ntop] how to monitor http and https only

Thanks for the hints. But there is still too much information.
All I want is:
- 192.168.0.xxx, between 08:00-14:00, accessed the following sites: ...
- www.facebook.com, between 08:00-14:00, was accessed by the following 
local IP-s: ...

I don't need the:
- Host Traffic Stats
- Packet Statistics
- Protocol Distribution
- TCP/UDP Recently Used Ports
- IP Service Stats: Client Role
- TCP/UDP - Traffic on Other Ports

How can I do all these?

Istvan

On 26.04.2010 17:12, Gary Gatten wrote:
> Good call. One can also restrict the displayed protocols with -p, all remaining traffic will be displayed as "other"
>
> ----- Original Message -----
> From: ntop-bounces at listgateway.unipi.it<ntop-bounces at listgateway.unipi.it>
> To: ntop at unipi.it<ntop at unipi.it>; ntop at listgateway.unipi.it<ntop at listgateway.unipi.it>
> Sent: Mon Apr 26 08:44:04 2010
> Subject: Re: [Ntop] how to monitor http and https only
>
> Have you taken a look at the  manpages for ntop? On a unix system, the "-B" switch followed by a pcap expression will give you want you want.
>
> e.g
>
> ntop -d -w 8080 -B "port 80 or 443"
>
>
> -----Original Message-----
> From: ntop-bounces at listgateway.unipi.it [mailto:ntop-bounces at listgateway.unipi.it] On Behalf Of Istvan Köpe
> Sent: Monday, April 26, 2010 9:40 AM
> To: ntop at listgateway.unipi.it
> Subject: [Ntop] how to monitor http and https only
>
> Hello,
>
> I just installed ntop and it gives me much more information I need. I
> would like to see only the traffic on ports 80 and 443.
> How can I do that?
>
> Istvan
> _______________________________________________
> Ntop mailing list
> Ntop at listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
> _______________________________________________
> Ntop mailing list
> Ntop at listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
> _______________________________________________
> Ntop mailing list
> Ntop at listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>    

_______________________________________________
Ntop mailing list
Ntop at listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop


More information about the Ntop mailing list