I'd like to try ntop on both 100Mbps and 1Gbps ethernet segments.
Q: It appears to me that ntop is a "poor mans RMONv2". Is this correct?
I'm interested in the header information only.
Q: What level of performance have people seen with ntop?
Q: What hardware and software features do I need to optimize ntop performance?
- Operating System (Linux 2.4, FreeBSD, OpenBSD, ... ) ?
- processor type (AMD/Intel/...) and speed? Or perhaps dual processors?
- more than 1 GB of RAM ?
- RAM-disk?
- stripped disks ?
At the moment I'm thinking to use Linux or FreeBSD or OpenBSD with a
1.3GHz Athlon or a 1.7GHz P4.
Q: Are there particular vendor NICs recommended for optimal ntop capture
with 100Mbps (FastEthernet)?
How about 1Gbps (GigE)?
Q: Would it be best to capture the traffic on one (or more) host and
then pass it to another box for analysis and web display?
(This layout would preclude realtime.)
Q: It appears to me that ntop is a "poor mans RMONv2". Is this correct?
I'm interested in the header information only.
Q: What level of performance have people seen with ntop?
Q: What hardware and software features do I need to optimize ntop performance?
- Operating System (Linux 2.4, FreeBSD, OpenBSD, ... ) ?
- processor type (AMD/Intel/...) and speed? Or perhaps dual processors?
- more than 1 GB of RAM ?
- RAM-disk?
- stripped disks ?
At the moment I'm thinking to use Linux or FreeBSD or OpenBSD with a
1.3GHz Athlon or a 1.7GHz P4.
Q: Are there particular vendor NICs recommended for optimal ntop capture
with 100Mbps (FastEthernet)?
How about 1Gbps (GigE)?
Q: Would it be best to capture the traffic on one (or more) host and
then pass it to another box for analysis and web display?
(This layout would preclude realtime.)