Creating and populating RRD files to be processed and displayed in ntop
This post is a work in progress….
Given that your ntop instance is located: /usr/local/ntop/
The location for the rrd files that can be produced via ntop’s web UI at Plugins> Round-Robin Database> Arbitrary Graphs http://ntopinstances/plugins/rrdPlugin/arbgraph.html is:
For my purpose, I am using an interface called sFlow-device (as I’m still juggling port span/mirroring to the extra interface on my ntop box).
The list in the web UI is all rrd files for all your interfaces. So, some of the rrd files aren’t generated for an sFlow device as are for an ethernet interface.
I’d like to configure ntop so that rrd files are created for additional filters. Specifically, I’d like to figure out if I can create a file that excludes HTTP(s) traffic, and a file that includes traffic over/on IRC.
[… a bunch more info here]
Lastly, to convert a date and time to epoch, use:
date --date='2011-09-23 12:39:00 UTC -5' +%s
Note the format of time is in YYYY-MM-DD.