Mailing List Archive

Daily download totals needed
I'm investigating why our ISP's website is displaying our daily download stats as about 1/4 of the normal amounts for the last three weeks.

One theory is that their stats are wrong, so I'm trying to use ntopng to verify their totals. How?

The historical data explorer is giving totals way too high, so I assume includes outgoing traffic too, and probably WAN traffic. Is there no way to separate these out?

If I click on Interfaces, and select the only option there, then on what looks like someone wearing a stethoscope, I see the traffic broken up by profiles, so I can choose "Incoming only", which I've defined as " dst net 192.168 and not src net 192.168". I click on the graph icon, and I can see the last day, week, etc, with the total for that period at the bottom. But I can't get a total for yesterday, or the day before. I can't even get a midnight to midnight total for the last day because it uses the current time as the end of the 24 hours.

Is there a way to get what I want from it?

Peter Shute
_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
Re: Daily download totals needed [ In reply to ]
I'm confused about the "Info" filter on the Historical Data Explorer page. In the results, in the IPv4 tab, the info column contains the names of traffic profiles I've created. But if I type any of those names into the Info filter box, it returns no results.

And if I download IPv4 flows, the Info column is empty, and traffic profile names are in the Profile column.

What exactly is this Info filter? Is there any way to filter on traffic profile?

And why is there no mention of the historical data explorer in the user guide? (https://raw.githubusercontent.com/ntop/ntopng/dev/doc/UserGuide.pdf)

> -----Original Message-----
> From: ntop-bounces@listgateway.unipi.it [mailto:ntop-
> bounces@listgateway.unipi.it] On Behalf Of Peter Shute
> Sent: Friday, 14 July 2017 11:59 AM
> To: 'ntop@listgateway.unipi.it' <ntop@listgateway.unipi.it>
> Subject: [Ntop] Daily download totals needed
>
> I'm investigating why our ISP's website is displaying our daily download stats
> as about 1/4 of the normal amounts for the last three weeks.
>
> One theory is that their stats are wrong, so I'm trying to use ntopng to verify
> their totals. How?
>
> The historical data explorer is giving totals way too high, so I assume includes
> outgoing traffic too, and probably WAN traffic. Is there no way to separate
> these out?
>
> If I click on Interfaces, and select the only option there, then on what looks
> like someone wearing a stethoscope, I see the traffic broken up by profiles,
> so I can choose "Incoming only", which I've defined as " dst net 192.168 and
> not src net 192.168". I click on the graph icon, and I can see the last day,
> week, etc, with the total for that period at the bottom. But I can't get a total
> for yesterday, or the day before. I can't even get a midnight to midnight total
> for the last day because it uses the current time as the end of the 24 hours.
>
> Is there a way to get what I want from it?
>
> Peter Shute
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
Re: Daily download totals needed [ In reply to ]
Peter,

Currently, daily totals breakdown are not supported for traffic profiles. As an alternative, you can use the report feature available for the networks -- even though it doesn't separate incoming from outgoing. See this screenshot:



The feature shown above is only available in the enterprise version.

Regards,
Simone

> On 14 Jul 2017, at 03:59, Peter Shute <pshute@nuw.org.au> wrote:
>
> I'm investigating why our ISP's website is displaying our daily download stats as about 1/4 of the normal amounts for the last three weeks.
>
> One theory is that their stats are wrong, so I'm trying to use ntopng to verify their totals. How?
>
> The historical data explorer is giving totals way too high, so I assume includes outgoing traffic too, and probably WAN traffic. Is there no way to separate these out?
>
> If I click on Interfaces, and select the only option there, then on what looks like someone wearing a stethoscope, I see the traffic broken up by profiles, so I can choose "Incoming only", which I've defined as " dst net 192.168 and not src net 192.168". I click on the graph icon, and I can see the last day, week, etc, with the total for that period at the bottom. But I can't get a total for yesterday, or the day before. I can't even get a midnight to midnight total for the last day because it uses the current time as the end of the 24 hours.
>
> Is there a way to get what I want from it?
>
> Peter Shute
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
Re: Daily download totals needed [ In reply to ]
Peter,

Currently, daily totals breakdown are not supported for traffic profiles. As an alternative, you can use the report feature available for the networks -- even though it doesn't separate incoming from outgoing. See this screenshot:



The feature shown above is only available in the enterprise version.

Regards,
Simone

> On 14 Jul 2017, at 03:59, Peter Shute <pshute@nuw.org.au> wrote:
>
> I'm investigating why our ISP's website is displaying our daily download stats as about 1/4 of the normal amounts for the last three weeks.
>
> One theory is that their stats are wrong, so I'm trying to use ntopng to verify their totals. How?
>
> The historical data explorer is giving totals way too high, so I assume includes outgoing traffic too, and probably WAN traffic. Is there no way to separate these out?
>
> If I click on Interfaces, and select the only option there, then on what looks like someone wearing a stethoscope, I see the traffic broken up by profiles, so I can choose "Incoming only", which I've defined as " dst net 192.168 and not src net 192.168". I click on the graph icon, and I can see the last day, week, etc, with the total for that period at the bottom. But I can't get a total for yesterday, or the day before. I can't even get a midnight to midnight total for the last day because it uses the current time as the end of the 24 hours.
>
> Is there a way to get what I want from it?
>
> Peter Shute
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop