Mailing List Archive

Implications of turning on layer-7 timeseries
Can anyone please tell what the implications are of turning on the option labelled "Toggle the creation of application protocols timeseries for local hosts and defined local networks"?

What will this allow me to do? And what's likely to be affected by it? Just disk space?

Peter Shute
_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
Re: Implications of turning on layer-7 timeseries [ In reply to ]
Peter,

Enabling this option will cause ntopng to create, for every local host and
network, as many RRD files as then number of application protocols detected
for that particular host or network. This will impact the disk space.
However, as RRD files size is fixed, worst case estimations can be done
without many difficulties.

Some extra work is required, every 5 minutes, to update these RRDs for each
local host. CPU complexity for this operation can be considered as
O(num_local_hosts * avg_num_of_app_protocols_per_local_host * cost of
updating and RRD file).

Simone

On Thu, Jun 1, 2017 at 5:25 AM, Peter Shute <pshute@nuw.org.au> wrote:

> Can anyone please tell what the implications are of turning on the option
> labelled "Toggle the creation of application protocols timeseries for local
> hosts and defined local networks"?
>
> What will this allow me to do? And what's likely to be affected by it?
> Just disk space?
>
> Peter Shute
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>