[Ntop] Traffic sent and traffic received in historical view in ntopng

[Peter Shute]

I'm also interested in this. I can get from my ISP daily totals for our internet usage. I would like ntopng to be able to replicate those daily totals (to give confidence our data is correct), and then analyse the totals to see which devices contributed. Eg. If we have an above average daily total, I want to know why.

Peter Shute

Sent from my iPad

On 16 May 2017, at 4:01 am, Andrew Hilborne <ntop-***@snkmail.com<mailto:ntop-***@snkmail.com>> wrote:

On 15 May 2017 at 17:10, Emanuele Faranda faranda-at-ntop.org<http://faranda-at-ntop.org> |ntop-flugle| <***@sneakemail.com<mailto:***@sneakemail.com>> wrote:

You are right, network stats are calculated every minute, whereas interface stats are updated each second.

Please note that these stats are dumped to RRD files, not to the MySQL database.

​Would it be possible t change this? Is the issue storage space in the MySQL database? This is what I want to know (initially):

* How much traffic is coming into and leaving my local network?
* What is the traffic breakdown?

I don't believe that this is an uncommon requirement. In the first place, looking at per-host flows isn't nearly so informative.

Andrew


_______________________________________________
Ntop mailing list
***@listgateway.unipi.it<mailto:***@listgateway.unipi.it>
http://listgateway.unipi.it/mailman/listinfo/ntop

[Peter Shute]

Where do I find that report, please? Do I have access to it? The GUI says I'm running "ntopng Pro [Small Business Edition] v.2.5.170323".

Peter Shute

-----Original Message-----
Sent: Wednesday, 17 May 2017 4:29 AM
Subject: Re: [Ntop] Traffic sent and traffic received in historical view in
ntopng
Ntopng can actually produce a traffic report where it shows the top
local/remote talkers for a specified time frame (e.g. a day), but this is a pro
only feature.

[Peter Shute]

OK, thanks, I didn’t spot those right down the bottom of the report.

One problem I have with it is that it takes so much work to run it for a calendar day – midnight to midnight.

It also doesn’t resolve remote ip addresses like some other pages do.



From: ntop-***@listgateway.unipi.it [mailto:ntop-***@listgateway.unipi.it] On Behalf Of Emanuele Faranda
Sent: Wednesday, 17 May 2017 8:11 AM
To: ***@listgateway.unipi.it
Subject: Re: [Ntop] Traffic sent and traffic received in historical view in ntopng


Please see this image



[cid:***@01D2CEFC.785C48C0]
Emanuele
On 05/17/2017 12:05 AM, Peter Shute wrote:

Where do I find that report, please? Do I have access to it? The GUI says I'm running "ntopng Pro [Small Business Edition] v.2.5.170323".



Peter Shute



-----Original Message-----

From: ntop-***@listgateway.unipi.it<mailto:ntop-***@listgateway.unipi.it> [mailto:ntop-

***@listgateway.unipi.it<mailto:***@listgateway.unipi.it>] On Behalf Of Emanuele Faranda

Sent: Wednesday, 17 May 2017 4:29 AM

To: ***@listgateway.unipi.it<mailto:***@listgateway.unipi.it>

Subject: Re: [Ntop] Traffic sent and traffic received in historical view in

ntopng



Ntopng can actually produce a traffic report where it shows the top

local/remote talkers for a specified time frame (e.g. a day), but this is a pro

only feature.

_______________________________________________

Ntop mailing list

***@listgateway.unipi.it<mailto:***@listgateway.unipi.it>

http://listgateway.unipi.it/mailman/listinfo/ntop

[Peter Shute]

The speed isn't the problem, Simone. It's the fact that the "one day" option, for example, covers the previous 24 hours, ending at the time you run the report. If I want midnight to midnight, I have to carefully edit the start and end date/times.

And once that's done, there appears to be no easy way to jump back 24 hours. I have to edit the dates again.

Sent from my iPad

On 17 May 2017, at 6:40 pm, Simone Mainardi <***@ntop.org<mailto:***@ntop.org>> wrote:

Peter,


On Wed, May 17, 2017 at 3:52 AM, Peter Shute <***@nuw.org.au<mailto:***@nuw.org.au>> wrote:
OK, thanks, I didn’t spot those right down the bottom of the report.

One problem I have with it is that it takes so much work to run it for a calendar day – midnight to midnight.

We implemented several optimizations that make report gereration faster, are you using the latest dev build?


It also doesn’t resolve remote ip addresses like some other pages do.



From: ntop-***@listgateway.unipi.it<mailto:ntop-***@listgateway.unipi.it> [mailto:ntop-***@listgateway.unipi.it<mailto:ntop-***@listgateway.unipi.it>] On Behalf Of Emanuele Faranda
Sent: Wednesday, 17 May 2017 8:11 AM
To: ***@listgateway.unipi.it<mailto:***@listgateway.unipi.it>
Subject: Re: [Ntop] Traffic sent and traffic received in historical view in ntopng


Please see this image



[cid:***@01D2CEFC.785C48C0]
Emanuele
On 05/17/2017 12:05 AM, Peter Shute wrote:

Where do I find that report, please? Do I have access to it? The GUI says I'm running "ntopng Pro [Small Business Edition] v.2.5.170323".



Peter Shute



-----Original Message-----

From: ntop-***@listgateway.unipi.it<mailto:ntop-***@listgateway.unipi.it> [mailto:ntop-

***@listgateway.unipi.it<mailto:***@listgateway.unipi.it>] On Behalf Of Emanuele Faranda

Sent: Wednesday, 17 May 2017 4:29 AM

To: ***@listgateway.unipi.it<mailto:***@listgateway.unipi.it>

Subject: Re: [Ntop] Traffic sent and traffic received in historical view in

ntopng



Ntopng can actually produce a traffic report where it shows the top

local/remote talkers for a specified time frame (e.g. a day), but this is a pro

only feature.

_______________________________________________

Ntop mailing list

***@listgateway.unipi.it<mailto:***@listgateway.unipi.it>

http://listgateway.unipi.it/mailman/listinfo/ntop


_______________________________________________
Ntop mailing list
***@listgateway.unipi.it<mailto:***@listgateway.unipi.it>
http://listgateway.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
***@listgateway.unipi.it<mailto:***@listgateway.unipi.it>
http://listgateway.unipi.it/mailman/listinfo/ntop

[Peter Shute]

Apologies for hijacking Andrew's thread, but maybe what I want could turn out to be helpful for others.

Looking though the available graphs and Andrew's Meraki video, I think where I'm struggling is that all the graphs show traffic in Mbit/s. That's ideal for identifying causes of peak bandwidth usage if you have problems with contention. It doesn't help if you're trying to identify reasons for high total usage, e.g. exceeding a monthly download quota.

I would like to have the option to see the traffic in, say, MB/hour or GB/day. The only way I can see to do that now is to manually enter date ranges and ignore the charts and just look at the totals. I've attached a sample GB/day chart from our ISP's website. I'm imagining being able to hover over the high usage day of 26 April and see the top talkers for that day. Or click on it and show just that day in MB/hour.

Would a feature like this help you, Andrew, or anyone?

Peter Shute

-----Original Message-----
Sent: Thursday, 18 May 2017 8:29 PM
Subject: Re: [Ntop] Traffic sent and traffic received in historical view in
ntopng
1) an aggregated view of the top protocols on the graph
2) an easy way from the historical explorer to aggregate per host or per
protocol to be able to see and sort bewteen accurate statistics

[Peter Shute]

I forgot to mention the reason for needing hourly or daily totals is that things like users streaming radio, etc, can contribute greatly to daily totals, but never show up in a MBits/s graph because they're low level, but all day.

Peter Shute

-----Original Message-----
Sent: Friday, 19 May 2017 9:42 AM
Subject: Re: [Ntop] Traffic sent and traffic received in historical view in
ntopng
Apologies for hijacking Andrew's thread, but maybe what I want could turn
out to be helpful for others.
Looking though the available graphs and Andrew's Meraki video, I think
where I'm struggling is that all the graphs show traffic in Mbit/s. That's ideal
for identifying causes of peak bandwidth usage if you have problems with
contention. It doesn't help if you're trying to identify reasons for high total
usage, e.g. exceeding a monthly download quota.
I would like to have the option to see the traffic in, say, MB/hour or GB/day.
The only way I can see to do that now is to manually enter date ranges and
ignore the charts and just look at the totals. I've attached a sample GB/day
chart from our ISP's website. I'm imagining being able to hover over the high
usage day of 26 April and see the top talkers for that day. Or click on it and
show just that day in MB/hour.
Would a feature like this help you, Andrew, or anyone?
Peter Shute

-----Original Message-----
Sent: Thursday, 18 May 2017 8:29 PM
Subject: Re: [Ntop] Traffic sent and traffic received in historical
view in ntopng
1) an aggregated view of the top protocols on the graph
2) an easy way from the historical explorer to aggregate per host or
per protocol to be able to see and sort bewteen accurate statistics

[Dave Davis]

I'm in favor of this. I myself need to see a 30 day report of all hosts, not
just the top 10. Using the Hosts/Hosts report and sorting by Traffic does
not let you select a time period, only "seen since". If I could select a
time period instead, I'd have everything I need to see a 30 day total of all
hosts.
In my preferences, I have both Idle and Active Local Hosts cache turned on
and "Active Local Host Cache Interval" and "Local Hosts Cache Duration"
both set to 30 days


-----Original Message-----
From: ntop-***@listgateway.unipi.it
[mailto:ntop-***@listgateway.unipi.it] On Behalf Of Peter Shute
Sent: Thursday, May 18, 2017 4:59 PM
To: '***@unipi.it' <***@unipi.it>
Subject: Re: [Ntop] Traffic sent and traffic received in historical view in
ntopng

I forgot to mention the reason for needing hourly or daily totals is that
things like users streaming radio, etc, can contribute greatly to daily
totals, but never show up in a MBits/s graph because they're low level, but
all day.

Peter Shute

-----Original Message-----
Sent: Friday, 19 May 2017 9:42 AM
Subject: Re: [Ntop] Traffic sent and traffic received in historical
view in ntopng
Apologies for hijacking Andrew's thread, but maybe what I want could
turn out to be helpful for others.
Looking though the available graphs and Andrew's Meraki video, I think
where I'm struggling is that all the graphs show traffic in Mbit/s.
That's ideal for identifying causes of peak bandwidth usage if you
have problems with contention. It doesn't help if you're trying to
identify reasons for high total usage, e.g. exceeding a monthly download

quota.

I would like to have the option to see the traffic in, say, MB/hour or GB/day.
The only way I can see to do that now is to manually enter date ranges
and ignore the charts and just look at the totals. I've attached a
sample GB/day chart from our ISP's website. I'm imagining being able
to hover over the high usage day of 26 April and see the top talkers
for that day. Or click on it and show just that day in MB/hour.
Would a feature like this help you, Andrew, or anyone?
Peter Shute

-----Original Message-----
Sent: Thursday, 18 May 2017 8:29 PM
Subject: Re: [Ntop] Traffic sent and traffic received in historical
view in ntopng
1) an aggregated view of the top protocols on the graph
2) an easy way from the historical explorer to aggregate per host or
per protocol to be able to see and sort bewteen accurate statistics

_______________________________________________
Ntop mailing list
***@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop


--