What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general.

Learn more

PRTG Network Monitor

Intuitive to Use. Easy to manage.
More than 500,000 users rely on Paessler PRTG every day. Find out how you can reduce cost, increase QoS and ease planning, as well.

Free Download

Top Tags


View all Tags

Generate a report from packet sniffer based on source

Votes:

0

I use port mirroring to capture traffic from my switch, this feature works great. The Top Connections report every 15 minutes has helped diagnose a few problems already. However, I need to take this to the next level, I need to take the data that is already there (say for the prior days 24 hour period) and filter out just specific source or destination IP addresses. Since the data is there I would imagine this should be simple.

Thanks!

packet-sniffing reports sniffer

Created on Feb 14, 2012 1:59:17 PM



9 Replies

Votes:

0

Dear David,

I'm sorry but Toplist data cannot be reported. You can use Custom Sniffer Sensors or Filters on normal Sniffer Sensors though to only monitor traffic for certain IPs: https://kb.paessler.com/knowledgebase/en/topic/473
https://kb.paessler.com/knowledgebase/en/topic/483
On the normal sensor historic data reports are then possible.

best regards.

Created on Feb 14, 2012 4:15:00 PM by Torsten Lindner [Paessler Support]

Last change on Feb 14, 2012 4:32:06 PM by Torsten Lindner [Paessler Support]



Votes:

0

Where is the toplist data stored so that I can access it outside of the interface?

Created on Feb 14, 2012 4:50:06 PM



Votes:

0

The Toplist data is stored in proprietary database files, in the PRTG Datafolder.

Created on Feb 14, 2012 6:14:16 PM by Torsten Lindner [Paessler Support]



Votes:

0

Why is it not possible to view data/traffic for all IP addresses? I have many "Other" toplists which I cannot see IP addresses for. I have tried reducing the Period to 1 min, top count to 1000 and memory limit to 100 and 45% of my toplist is still "Other". If there was a report/export that showed traffic by IP address this would shed some light on who is part of that "Other" group. What solution do you recommend to list packet sniffing traffic by IP address withing PRTG? Thanks.

Created on May 21, 2012 2:05:06 PM



Votes:

0

You could use several Sniffer Sensors with filters on them to reduce the amount of data for each sensor.

Created on May 21, 2012 4:14:25 PM by Torsten Lindner [Paessler Support]



Votes:

0

Sorry for asking in an old thread but is it realy impossible to report the top connections neither with the current version?

Created on Dec 22, 2016 9:02:17 AM



Votes:

0

Dear Michael_S,

While you can use toplists to see "snapshots", PRTG does not store netflow/packet sniffer data in a way that allows extensive reporting, I´m afraid.

Kind regards,
Sven

Created on Dec 22, 2016 1:59:48 PM by Sven Roggenhofer [Paessler Technical Support]



Votes:

0

Hi Sven,

I understand that extensive reporting can cause high database hits, but a nice feature would be a export function because it is very complex to save the data by cut copy & paste to an excel sheet.

Kind regards, Michael

Created on Dec 22, 2016 3:18:52 PM



Votes:

0

Hello Michael_S,

Thank you for your reply.

While I absolutely agree with you and it would be a formidable addition to PRTG, I wouldn't expect this feature to get implemented anytime soon.

We have looked into this in the past and there are several considerations that need to be taken into account, for instance the amount of data that needs to be store and the "performance" of such reporting feature.

So while we would love to offer this feature, there are a few obstacles that we need to address first.

Best regards,
Sven

Created on Dec 23, 2016 6:37:50 AM by Sven Roggenhofer [Paessler Technical Support]




Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.