Dear All, Good time of the day, I have few questions after installing ntopng, too small for separate topics:
1. Where do incorrect logins go? I want to configure fail2ban, but cannot find authentication failures in logs.
2. I have only one data source, so on a dashboard, right column mostly repeats middle one. Any way to hide it? Even better, same chart with breakdown by host would be great (of course, for top hosts only).
3. Cpu utilization by ntopng process on server is quite high when its page is open in browser: 15-20% for dashboard, ~10% for about page etc. (on a 1.6GHz Xeon). When I open several tabs things starts to lag noticeably (Firefox CPU utilization is also pretty high BTW). Lowering update frequency to 60 seconds does not help. Is it normal?
4. Throughput values shown in many places are very noisy. Our Cisco ASA only sends flow updates to nprobe once a minute, therefore any attempts to measure bandwidth with greater frequency is futile. I set update frequency to 60 seconds in ntopng preferences, but charts on dashboard etc. are still updated every second with random values. Any way to slow them down?
5. Torrent traffic is only detected for seeding, not for downloads, right? I tried to test-download couple of gigs but ntopng only reported several megabytes and few kbps as BitTorrent application traffic for my host. (ASDM, in contrast, displayed correct bandwidth usage.)
Thanks in advance, With Best Regards, Marat Khalili _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
