Binand Sethumadhavan wrote:
Varun Varma posted in linux-india-help:

This is usually done on a per switch-port basis. Read up your switch's
documentation and use MRTG.

That won't account for virtual interfaces.

Instead, look at :

ntop (http://www.ntop.org)
or IPTraf (http://cebu.mozcom.com/riker/iptraf)


Indeed, yes. But then again, I don't think Linux keeps per-virtual
statistics either (I cannot see RX or TX bytes-count on my eth0:1).

ntop can show you information per virtual interface. Also, it can show flows between hosts and/or traffic patterns from/to a single host.


A couple of caveats exist:

-> The CPU load it generates can kill a machine.
-> It can only detect traffic to/from/passing through the machine it is running on, or analyze data generated by NetFlow. Thus, to monitor a complete network, two options exist:


--> Deploy it on a common gateway.
--> Mirror switch ports of hosts you are interested in monitoring to a monitoring machine, if your switch supports this. Commonly, you would mirror the traffic from your WAN router switch port.


If you are interested in monitoring the LAN traffic, then:

-> As Ben said, use cacti, if that meets your needs.
-> See if your switch supports a "snoop port", which mirrors the traffic on all the ports [or specific VLANs] on the switch to a single port. That way you can analyze the traffic on the entire LAN. Used commonly for running passive IDSs on the entire network.


IPTraf does not have any reporting facility like MRTG/RTG, IIRC.

Not in terms of maintaining historical reports, if that's what you mean. This is more of troubleshooting tool, in league of traceroute and ping.

--
Regards,
Varun Varma
---------------------------------------
Mindframe Software & Services Pvt. Ltd.
http://www.mindsw.com
---------------------------------------


-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help

Reply via email to