On Fri, Jan 25, 2013 at 07:55:35AM -0700, Daniel Melameth wrote: > > > > Can anyone propose a similar solution with OB? > > Read up on pflow(4) and related. This plus the nfdump port make for a > nice combination.
+1 also, nfsen (also from packages, sort of a companion to nfdum) if you want automatic traffic graphs with a web interface to a reasonable subset of useful traffic analysis features. - P -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.