Dan, > On 12 Sep 2017, at 15:46, Dan Staley <[email protected]> wrote: > > Thanks Simon, > > I thought that nProbe was a necessity without a router / switch that supports > netflows. Can I just install ntopng?
yes > > > Daily WAN usage is around 20gb per day with spikes of upto 100gb per day. I > have ran WAN speed tests on an iPhone delivering 120mb/s download speed but > it is usually 60mb/s. Upload speed is an order of magnitude slower. ok, this is definitely doable also with ntopng alone > > I currently don't have any hardware for this. I was hoping I could use a > raspberry Pi or similar but from the sounds of it you think it requires more > CPU speed / RAM. 100Mbps on a pi is too much. > Could you recommend a low cost / low power device see this fan-less mini-pc: https://www.zotac.com/product/mini_pcs/zbox_c_series <https://www.zotac.com/product/mini_pcs/zbox_c_series> > or am I best off trawling eBay for an old server? > > Thanks again, > > Dan > > > On 12 Sep 2017 8:56 a.m., "Simone Mainardi" <[email protected] > <mailto:[email protected]>> wrote: > Dan, > >> On 11 Sep 2017, at 16:37, Dan Staley <[email protected] >> <mailto:[email protected]>> wrote: >> >> >> I have the following network setup in a large community house with 24 users, >> each of whom have 2-7 devices who all use it exvlusively to connect to the >> Internet: >> >> >> >> <image002.png> >> >> >> >> As you can see I am slowly replacing cheap unreliable hardware with more >> reliable Cisco equipment. >> >> >> >> I’d like to better understand the traffic flows to improve performance and >> it looks like nProbe and ntopng could help with this. >> >> >> >> I have read few articles posted over a number of years about running nProbe >> and ntopng on low cost hardware. Has anyone got any advice about: >> >> 1. whether nProbe/ntopng is the right solution for our house (on a >> budget) – am I barking up the right tree? >> > > It is the right solution. You may not even need nProbe. > >> 2. The architecture – should I connect a nProbe / ntopng node to the >> router and port mirror the port running to the switch? >> > > This is the ideal setup to capture all the traffic from/to the Internet. You > won't see the traffic between clients but you will get all the traffic that > enters/exit the home network. > >> I would like to avoid adding a point of failure which would be introduced >> using the similar solution of putting the nProbe between the switch and the >> router or router and internet proposed here >> <http://www.ntop.org/nprobe/how-to-build-a-100e-augmented-netflowipfix-probe-ubiquity/>. >> > > No need for a bridged setup. A passive mirror is OK in your environment. > >> 3. up-to-date advice about suitable low cost hardware which can run >> both nProbe and ntopng and handle the volume of traffic. >> > > Please, give indication on the volume of traffic. Anyway, any box with a > 2.4GHz+ processor and 4GB+ RAM should suffice in an environment like yours. > >> >> >> Thanks very much, >> >> >> >> Dan >> >> _______________________________________________ >> Ntop mailing list >> [email protected] <mailto:[email protected]> >> http://listgateway.unipi.it/mailman/listinfo/ntop >> <http://listgateway.unipi.it/mailman/listinfo/ntop> > > _______________________________________________ > Ntop mailing list > [email protected] <mailto:[email protected]> > http://listgateway.unipi.it/mailman/listinfo/ntop > <http://listgateway.unipi.it/mailman/listinfo/ntop> > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
