Traffic monitoring, NTOP

Today I want to talk about a very useful utility for monitoring the network. What is the goal? The traffic of my office has to be under control, and it checks who visits denied internet pages or who uses P2P applications.
I don't like to spy my users, but if the boss asks to me I have to report to him eventual malicious traffic, What is the right product to make it?

My reference product to make it is NTOP. NTOP is an opensource traffic monitoring probe that run other linux and unix-like system operative, it shows to you the network usage, and a with a browser you can have a snapshot of what happening in your network.




Luca Deri, University of Pisa developed and mantains it.

The integration in a network:
If you have a network based on CISCO switches, you can use the SPAN feature. So you can able the SPAN on you Network-Core to mirror the traffic on the port connected to the ntop server.

For Example:
I have a Network core made with 2 CISCO 3750, it's connected with the firewall through the port GigabitEthernet 0/0/1. Ntop server has 2 gigabitports, the first gigabit ports is in promiscous mode (ntop sets it for you) and it recieves traffic mirrored with SPAN feature from the ports GigabitEthernet 0/0/2 of the Core. The second port is connected to the network and it has an IP address of our network, so we can reach with a browser our ntop server.

On the switches I will configure:
conf term
monitor session session_number source interface GigabitEthernet0/0/1 both
monitor session session_number destination interface GigabitEthernet0/0/2
end
write mem

now connect with your browser to:
http://ntop-ipaddress:3000

Last week-end

I had a good week-end, I started with the first exit in bike followed by 15 minutes running. The weather was ok, not warm and not cold, condition perfect for a tour on Piano di magadino.

Acb back to win, very exciting match, it's finished 0-2 the first part and in second part ACB first equalized and than wins, the mvp was a bastard and cold wind from north....

and for a great saturday finish HCAP won the third match of playout against Bienne, 2 - 5 the final score, now I'm waiting for the match of tomorrow to the Valascia



Tomorow other Brick training session, 1:40 biking and 20 minutes running.

Swimming and snowing

Spring is arriving?? It's tough to believe, today 10th march is snowing!! I like the snow and it's not a problem for me, I take the train for reach my work!

Workout of the day is swimming
2800 meters
I'm going to the CSB (my favourite swimming pool) at 6:30 pm. and it will be exiting swimming and see outside the snow.

Hi!

Hi everybody,
This is my first message or blog or I don't know the right word about it.

Why open a blog?
Because, I want to tell my life about my work and my hobbies

Who I am?
I'm Marco, live in Bellinzona (Switzerland), I was born in Rome half italian and half Swedish 32 years ago. I work as IT for American company and my hobbies are: train to triathlon and follow soccer and hockey.

Why in english?
I'm learning English and maybe it's a good way to improve english.