New Question
 
 
PRTG Network Monitor

Intuitive to Use.
Easy to manage.

200.000 administrators have chosen PRTG to monitor their network. Find out how you can reduce cost, increase QoS and ease planning, as well.

Free PRTG
Download >>

 

What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general. You are invited to get involved by asking and answering questions!

Learn more

 

Top Tags


View all Tags


Generate a report from packet sniffer based on source

Votes:

0

Your Vote:

Up

Down

I use port mirroring to capture traffic from my switch, this feature works great. The Top Connections report every 15 minutes has helped diagnose a few problems already. However, I need to take this to the next level, I need to take the data that is already there (say for the prior days 24 hour period) and filter out just specific source or destination IP addresses. Since the data is there I would imagine this should be simple.

Thanks!

packet-sniffing reports sniffer

Created on Feb 14, 2012 1:59:17 PM by  David Dinner (0) 1



9 Replies

Votes:

0

Your Vote:

Up

Down

Dear David,

I'm sorry but Toplist data cannot be reported. You can use Custom Sniffer Sensors or Filters on normal Sniffer Sensors though to only monitor traffic for certain IPs: http://kb.paessler.com/knowledgebase/en/topic/473
http://kb.paessler.com/knowledgebase/en/topic/483
On the normal sensor historic data reports are then possible.

best regards.

Created on Feb 14, 2012 4:15:00 PM by  Torsten Lindner [Paessler Support]

Last change on Feb 14, 2012 4:32:06 PM by  Torsten Lindner [Paessler Support]



Votes:

0

Your Vote:

Up

Down

Where is the toplist data stored so that I can access it outside of the interface?

Created on Feb 14, 2012 4:50:06 PM by  David Dinner (0) 1



Votes:

0

Your Vote:

Up

Down

Created on Feb 14, 2012 6:14:16 PM by  Torsten Lindner [Paessler Support]



Votes:

0

Your Vote:

Up

Down

Why is it not possible to view data/traffic for all IP addresses? I have many "Other" toplists which I cannot see IP addresses for. I have tried reducing the Period to 1 min, top count to 1000 and memory limit to 100 and 45% of my toplist is still "Other". If there was a report/export that showed traffic by IP address this would shed some light on who is part of that "Other" group. What solution do you recommend to list packet sniffing traffic by IP address withing PRTG? Thanks.

Created on May 21, 2012 2:05:06 PM by  zuperman (0) 1



Votes:

0

Your Vote:

Up

Down

You could use several Sniffer Sensors with filters on them to reduce the amount of data for each sensor.

Created on May 21, 2012 4:14:25 PM by  Torsten Lindner [Paessler Support]



Votes:

0

Your Vote:

Up

Down

Sorry for asking in an old thread but is it realy impossible to report the top connections neither with the current version?

Created on Dec 22, 2016 9:02:17 AM by  Michael_S (0)



Votes:

0

Your Vote:

Up

Down

Dear Michael_S,

While you can use toplists to see "snapshots", PRTG does not store netflow/packet sniffer data in a way that allows extensive reporting, I´m afraid.

Kind regards,
Sven

Created on Dec 22, 2016 1:59:48 PM by  Sven Roggenhofer [Paessler Technical Support]



Votes:

0

Your Vote:

Up

Down

Hi Sven,

I understand that extensive reporting can cause high database hits, but a nice feature would be a export function because it is very complex to save the data by cut copy & paste to an excel sheet.

Kind regards, Michael

Created on Dec 22, 2016 3:18:52 PM by  Michael_S (0)



Votes:

0

Your Vote:

Up

Down

Hello Michael_S,

Thank you for your reply.

While I absolutely agree with you and it would be a formidable addition to PRTG, I wouldn't expect this feature to get implemented anytime soon.

We have looked into this in the past and there are several considerations that need to be taken into account, for instance the amount of data that needs to be store and the "performance" of such reporting feature.

So while we would love to offer this feature, there are a few obstacles that we need to address first.

Best regards,
Sven

Created on Dec 23, 2016 6:37:50 AM by  Sven Roggenhofer [Paessler Technical Support]



Please log in or register to enter your reply.


Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.