NTOP 監控網路流量

作者: cross 日期: 2006-11-14 20:38

字體大小: 小中大

目的:

1。可以用來監控公司內部或有 NAT 環境的網路流量，有效的掌控流量是來龍去脈

2。集中控管，需要放在 gateway 機器上，或者使用 mirror 方式

環境: fedora core、NTOP v3.3.8

1. 安裝 yum install ntop

2. 編輯設定檔 vi /etc/ntop.conf

# tells ntop the user id to run as
# 使用那個 User 執行 NTOP
--user ntop

# save messages into the system log
# 背景執行 NTOP
--use-syslog=daemon

# sets the directory that ntop runs from
# 圖、庫放置位子
--db-file-path /var/lib/ntop

# the amount and severity of messages that ntop will put out
--trace-level 3

# limit ntop to listening on a specific interface and port
#--http-server 127.0.0.1:3000 --https-server 127.0.0.1:3001
# 掛載的連接埠
--http-server 3000
--https-server 3001

# Under certain circumstances, the sched_yield() function causes the ntop web
# server to lock up. It shouldn't happen, but it does. This option causes
# ntop to skip those calls, at a tiny performance penalty.
--disable-schedyield

# disables "phone home" behavior
--skip-version-check=yes

# 記錄 log 在 /var/log/messages
--use-syslog

# 監聽 eth0
--interface=eth0