Topic: sane bandwidth monitoring

[FreakWent]

Hi!

I don't mind if we use ntop or something else, but I need to see what hosts on the LAN are using all the net bandwidth.

rrdtool won't compile, can't find cairo-ps.pc and friends, even though I set the PKG_CONFIG_PATH.

ntop sources don't like the rrdtool from the rpms for some reason.

the yum install of ntop has a broken /etc/ntop.conf, so the init script won't start:

FATAL ERROR: Unrecognized/unprocessed ntop options...
                                           ,     --user ntop, ,   --db-file-path /var/ntop, ,     ,     ,       --use-syslog, ,     ,       ,     ,         ,     ,     

Manually starting ntop works, and it listens on port 3000, but if you connect (even from localhost), it aborts with a RST packet and logs nothing.

This behaviour seems like maybe it's been seen before:
http://lists.ntop.org/pipermail/ntop-dev/2004-January/004104.html

so I strace it and it's just sitting there,

nanosleep({10, 0}, {0, 0})              = 0

Please, does anyone have a method for bandwidth monitoring on 7.4 which is simpl(ish) to install and doesn't do weird stuff?

Thanks for _any_ help.  I've been messing with this on and off for weeks now.

EDIT: It's not the firewall either.

[janet]

FreakWent

At a command prompt do
iptraf

[FreakWent]

yup; I know about iptraf but it only gives me a snapshot; I'd like cumulative data counts over time per internal IP, if possible.

[janet]

FreakWent

Have you read all of
http://forums.contribs.org/index.php/topic,33302.0.html

and the link to this howto
http://www.sonoracomm.com/index.php?option=com_content&task=view&id=145


Alternatively how about sarg or vnstat
http://wiki.contribs.org/Sarg
or
http://wiki.contribs.org/Vnstat

[FreakWent]

I didn't click the links to find out if I'd read them earlier or not.   rrdtool-1.2.30 does not have the same dependency problems that I encountered regarding 'pangocairo', and once that was in I compiled ntop against it.  The startup scripts from the yum package don't work well for me, but that's easy to get around.  It's working ok now and I'm happy.

[janet]

FreakWent

  The startup scripts from the yum package don't work well for me, but that's easy to get around.  It's working ok now...

I assume you mean ntop.conf was problematic as per your first post. How did you resolve that. What are the steps you followed and what is your ntop.conf contents ?

[FreakWent]

I didn't resolve it.

I just ran it from the command line and I figure I'll deal with the init script after the next reboot, hopefully in so many months time that I'll have forgotten how to do it.

[jcornuz]

Hi there

just in case this can be of help to someone else:

http://www.gossamer-threads.com/lists/ntop/users/21728.

Just edit etc/init.d/ntop and modify:
daemon $prog -d -L @/etc/ntop.conf

for
daemon $prog @/etc/ntop.conf -d -L

Take care,

Joel

[FreakWent]

Resurrected!

Same problem persists.  SME 7.5.1, clean install, different hardware.  dag repository install, won't start.  Change the init script to "daemon $prog @/etc/ntop.conf -d -L", then it starts up but resets all incoming connections to port 3000.

As seen here:
http://lists.ntop.org/pipermail/ntop/2009-August/thread.html#14965

All the posts "web server won't respond".

So to get this thing working in August 09 I had to recompile everything from source on SME server.  I think the DAG repository packages are busted.  Can anyone comment on whether or not they have had success with these RPMs?  If so, did you not encounter these problems or did you find a fix for them?

Can someone please add the init script fix to the wiki, and perhaps add a note to indicate that it won't work anyway? 

I'll post back when I'm finished with a list of what I did.

[janet]

FreakWent

Please use the search function.
A search on ntop found this alternative approach
http://forums.contribs.org/index.php/topic,46658.msg229123.html#msg229123

[FreakWent]

Thanks, that took about five minutes.

Since my last post, I have been doing nothing but rrdtool and libpangocairo and geoip and python-config and adding #defines and I haven't left the keyboard.  What a waste of time!

Anyway, it's been hell, so thanks a lot!  I wish I'd checked back sooner.