The role of these two components is pretty clear: nProbe has the role of collecting traffic data, while nTop makes that data visible and easily analyzable. There is something, however, that needs to be explicitly stated, which is to decide whether it’s ntopng that should contact nProbe or vice versa, and as we’re in a…
Read MorenTop now uses the nDPI (network deep packet inspection) library to classify packets within network traffic for those protocols that either do not use a standard port (defined as well known ports like https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers and https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml) or that are dynamically assigned. In any case the need to classify not only the packet header but also…
Read MoreA customer asked me to analyze their network flows, with a solution oriented towards using an nBox that collects NetFlow data from a router located away from the branch office, takes it in for analysis, and then sends it to a NetEye Elastic module, which act as an analysis console for that NetFlow data. The…
Read MoreA client with a really large number of routers installed at their client asked me one day to analyze each of those network flows. They hoped that an analysis tool would be able to discover and impose a multitenant configuration all on its own, so that access could be granted to final users while guaranteeing…
Read MoreOne of my clients with a number of routers installed at their own remote location asked me if I could analyze the network flows at multiple locations. Their network architecture is a full mesh, and thus has private subnetworks, data center environments, and even in some cases cloud providers. Complex architectures like this require increasing…
Read MoreThe Real User Experience Monitoring (RUM) is a new approach adopted to provide specific control on IT services and systems, allowing to analyse the performance and response time that the user really experiences. If you have an application behind a load balancer and the probe is between the client and the load balancer, the RUM retrieves…
Read MoreRecentemente ci siamo trovati ad implementare il network traffic monitor di NetEye presso un nostro cliente. Al fine di analizzare il traffico di rete e’ necessario implementare il “NetEye nprobe” che consente di controllare tutto il traffico di un certo segmento di rete. Per riuscire a far confluire il traffico di rete all’nprobe volevamo utilizzare…
Read MoreDurante l’evento di Nagios del 2009 abbiamo avuto il piacere di conoscere Luca Deri, sviluppatore del progetto Open Source ntop. ntop ha come obiettivo primario la realizzazione di un analizzatore di traffico di rete. Usando una proporzione come esempio, potremmo dire che Nagios sta all’infrastruttura come ntop sta alla rete. Abbiamo così iniziato una stretta…
Read More