Docs
  • CyberSIM Documentation
  • DPI Console User Manual
  • Dashboards
    • Dashboard in the Community Version
      • Talkers
      • Hosts
      • Ports
      • Applications
      • Autonomous System Numbers (ASNs)
      • Senders
    • Dashboard in the Professional Version
  • Historical Charts
    • Tabular View
  • Report
    • Activity report
  • Flows
    • Application
    • Layer-4 Protocol (L4 Proto)
    • Client
    • Server
    • Duration
    • Brakedown
    • Actual Throughput
    • Total Bytes
    • Info
  • Applications and Categories
    • Custom Applications
    • Custom Categories
    • Adding a Rule from a Flow
  • Host Details
    • Home
    • Traffic
    • Packets
    • Ports
    • Peers
    • Protocols
    • DNS
    • HTTP
    • Sites
    • Flows
    • SMNP
    • Talkers
    • Geography
    • Alerts Configuration
    • Statistics
  • Interfaces
    • Home
    • Packets
    • Protocols
    • ICMP
    • ARP
    • Statistics
    • Settings
    • Host Pools
    • DHCP Range
Powered by GitBook
On this page

Was this helpful?

  1. Interfaces

Statistics

PreviousARPNextSettings

Last updated 5 years ago

Was this helpful?

Statistics page provides historical traffic statistics for the selected interface. The user can choose to filter statistics on a protocol basis and display data in several formats (e.g., bytes, packets, flows, and so on). In the Professional Version of ntopng, traffic for interface views in shown as stacked per physical interface. Physical interface visualisation can be toggled by clicking on the coloured dot just left of interface name.

The time series span can be adjusted by selecting values from 5 minutes up to 1 year. Moreover, drill- down is possible by clicking on the time series itself. Every click zooms the chart in, centering the time series around the clicked point.

In addition, time series shown can be chosen via the dropdown menu labelled ‘Time series’. For example, it is possible to visualise all or just one protocol, traffic, packets, active hosts and flows, and so on. Ntopng is VLAN aware, hence if several VLANs are detected, traffic is accounted also on a VLAN basis.

Historical interface minute top talkers are shown on the right of the page, and get refreshed automatically when the mouse moves over the chart.

An historical “Flows” tab is present next to the “Chart” when ntopng is started with the -F switch. This historical table shows flows data that have been recorded and dumped during the selected observation period. The Professional/Enterprise version of ntopng also feature two extra tabs, namely, “Talkers” and “Protocols” to drill down historical data by talkers and application protocols.

The Dropdown Time Series Menu in the Statistics View of the Interface Details Page
The Statistics View of the Interface Details Page (Professional Version)
The Historical Flows Table of the Interface Details Page Statistics View