3

I've been trying the ntopng software from http://www.ntop.org/get-started/download on a CentOS box at work to monitor what is happening on our network. The problem I'm having is that I can't find any part of the software that gives an option to delete old data.

The disk usage by this software was so uncontrolled it used 79% of the space and 87% of the inodes on the disk in that server after a few months.

Has anyone seen a solution for having only the most recent xx days or GB of data when using ntopng? Also ensuring it doesn't run out of inodes as well. Can/should I just delete any old files and empty directories in its rrd data directory?

BeowulfNode42
  • 2,655

2 Answers2

5

I've encountered a similar problem. One day df -ih shows that there is no free inodes on root partition. OS is Ubuntu 12.04.

After some research I found that there is a lot of small .json files in /var/tmp/ntopng/\*/top_talkers/ which contain information about the most active consumers of traffic.

We don't need that much history (I've seen some files which are 1 year old) so I decided to delete all files older than 2 months:

find /var/tmp/ntopng/*/top_talkers/* -mtime +60 -delete

Also I’ve added task to the /etc/crontab:

@monthly    ubuntu  /usr/bin/find /var/tmp/ntopng/*/top_talkers/* -mtime +60 -delete

Now server uses only 55% of inodes.

GregL
  • 9,870
dima.butyrin
  • 156
0

There is option in Preferences->Timeseries Database. If you use RRD it is "Old RRDs Terention" and you can specify number of days. If you use InfluxDB it is "InfluxDB Storage" same idea - number of days. Also in Preferences->Misc->Databases there is option "Top Talkers Storage" - number of days.

I know the answer is in old question, but I was looking for same information and could not find it. So here it is.

Philip Bonev
  • 1