After my last ntopng trainings, which I taught as an instructor, I noticed that many ntopng users were not familiar with the display of multiple time series charts overlapping in one graphic.
Since I believe that this is one of the most important display options, I’ll use this blog post to show you how to configure something like this in ntopng version 5.6.
Use case description:
I’m monitoring an interface in ntopng that receives the flows on port 5557, and I want to know how much of the traffic goes to HTTP and HTTPS traffic.
Using the “Custom Traffic Disaggregation” functionality, I create a subinterface with the filter for HTTP and HTTPS. This subinterface only shows me the filtered flows:
Click on the “+” button to add the disaggregation.
Create the desired filter:
When you finish creating the filter, verify that the flows are correctly filtered by selecting the new subinterface on point “1”:
If everything works fine, go back to the original interface on port 5557, verify point “1” on the image and open the graphic and “Manage Timeseries” window:
On the “Manage Timeseries” windows create your additional time series; in our case select the newly created subinterface:
Afterwards you’ll see both charts, but separated out. To lay over the newly created subinterface, follow the instructions:
Next you’re able to see all the traffic, and via the orange line the HTTP/HTTPS traffic.
Finally you can create a snapshot of this graphic. By creating a snapshot, you can save the graphic settings and easily reopen them at another time.
I place the subinterface I just created called HTTPS on the graphic with the complete traffic, and see how much the HTTPS traffic makes up the total traffic.
Of course, when selecting the time series, you can also select other predefined filter options for the metrics under the “Metric” item.
This example is intended to demonstrate the possibility of analyzing various network flows and identifying bottlenecks.
Did you find this article interesting? Does it match your skill set? Our customers often present us with problems that need customized solutions. In fact, we’re currently hiring for roles just like this and others here at Würth Phoenix.