How to save NTOP results?

Deewanagan · 09-04-2009, 11:00 PM

hi guys,
is there a way to save the data that the ntop application produces?
and how can i make ntop to measure the whole network's traffic, not only the computer that its running on. i have it installed on my computer, but don't know why it only shows the local traffic.
any help is appreciated.

tanx,

acid_kewpie · 09-05-2009, 01:11 AM

Whenever I've used it, ntop certainly has had no capability to save data across a restart of the ntop service.

As for monitoring all traffic, it can only report on what it sees, and if that's a one nic box on a regular switch it will only see it's own traffic. You would need to mirror all traffic to the box using a better switch, use an old school hub, or configure a suitably complex gateway device which does see all traffic to forward netflow / ipfix / sflow data to it. Or make this server the default router itself.

highfructose327 · 09-05-2009, 09:51 AM

ntop's website seems to have quite a bit of documentation http://www.ntop.org/news.html and a need help? tab http://www.ntop.org/needHelp.html good luck

john test · 09-05-2009, 10:44 AM

Did you try to execute ntop with a redirect to append standard out to a file? like ntop >> filename

If you establish a linux box as the router/gateway to the internet and run ntop on that router then ntop will see all trafficacross the lan and out to the internet.

acid_kewpie · 09-06-2009, 12:14 AM

ntop doesn't print it's data to stdout... It's a server with a complex web interface.