Re: AW: Traffic monitoring

2003-03-18 Thread J.J. van Gorkum
On Tue, 2003-03-18 at 16:04, debian-security wrote: > > > >check out flowscan > > > >http://www.caida.org/tools/utilities/flowscan/ > > > >it gets close to what you want, assuming all the traffic is > >passing through a cisco router. A better choice (IMHO) would be flow-tools at http://www.spl

Re: AW: Traffic monitoring

2003-03-18 Thread J.J. van Gorkum
On Tue, 2003-03-18 at 16:04, debian-security wrote: > > > >check out flowscan > > > >http://www.caida.org/tools/utilities/flowscan/ > > > >it gets close to what you want, assuming all the traffic is > >passing through a cisco router. A better choice (IMHO) would be flow-tools at http://www.spl

AW: Traffic monitoring

2003-03-18 Thread debian-security
> >check out flowscan > >http://www.caida.org/tools/utilities/flowscan/ > >it gets close to what you want, assuming all the traffic is >passing through a cisco router. Something like this for Linux would bei really cool ! Nik

AW: Traffic monitoring

2003-03-18 Thread debian-security
> >check out flowscan > >http://www.caida.org/tools/utilities/flowscan/ > >it gets close to what you want, assuming all the traffic is >passing through a cisco router. Something like this for Linux would bei really cool ! Nik -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "

Re: [d-security] Traffic monitoring

2003-03-17 Thread Christian Hammers
On Fri, Mar 14, 2003 at 08:03:17PM +0100, Nils wrote: > How do you monitor what network traffic you have and how much? I want to > be able to see the origin and destination, type and volume. Try looking for "netflow". It's a traffic accounting protocol invented by Cisco and supported by most Cisco

Re: [d-security] Traffic monitoring

2003-03-17 Thread Christian Hammers
On Fri, Mar 14, 2003 at 08:03:17PM +0100, Nils wrote: > How do you monitor what network traffic you have and how much? I want to > be able to see the origin and destination, type and volume. Try looking for "netflow". It's a traffic accounting protocol invented by Cisco and supported by most Cisco

Re: Traffic monitoring

2003-03-16 Thread martin f krafft
also sprach Adrian 'Dagurashibanipal' von Bidder <[EMAIL PROTECTED]> [2003.03.15.0135 +0100]: > Hmmm. As long as you have specific protocols, you could always parse the > server logs. ftp and http should be no problem, most daemons write a > sensible log, I guess. Others (especially IMAP) I don't

Re: Traffic monitoring

2003-03-16 Thread martin f krafft
also sprach Adrian 'Dagurashibanipal' von Bidder <[EMAIL PROTECTED]> [2003.03.15.0135 +0100]: > Hmmm. As long as you have specific protocols, you could always parse the > server logs. ftp and http should be no problem, most daemons write a > sensible log, I guess. Others (especially IMAP) I don't

Re: Traffic monitoring

2003-03-15 Thread Marcus Beranek
Am Saturday 15 March 2003 00:15 schrieb Stefan Neufeind: > You might want to try out the packat "iptraf" and monitor the > interface ipsec0. It gives you various overwiews on traffic going > over each port in / out as well as other statistics. Only drawback: > It only counts as long as you leave it

Re: Traffic monitoring

2003-03-15 Thread Marcus Beranek
Am Saturday 15 March 2003 00:15 schrieb Stefan Neufeind: > You might want to try out the packat "iptraf" and monitor the > interface ipsec0. It gives you various overwiews on traffic going > over each port in / out as well as other statistics. Only drawback: > It only counts as long as you leave it

Re: Traffic monitoring

2003-03-14 Thread Adrian 'Dagurashibanipal' von Bidder
On Sat, 2003-03-15 at 00:22, Stefan Neufeind wrote: > Is there any good way to account traffic on one computer by user? I Hmmm. As long as you have specific protocols, you could always parse the server logs. ftp and http should be no problem, most daemons write a sensible log, I guess. Others (es

Re: Traffic monitoring

2003-03-14 Thread Samuele Giovanni Tonon
On Fri, Mar 14, 2003 at 08:03:17PM +0100, Nils wrote: > Hello everybody! > > I have small but complicated problem. > > How do you monitor what network traffic you have and how much? I want to > be able to see the origin and destination, type and volume. > try ntop traffic-vis darkstat regards

Re: Traffic monitoring

2003-03-14 Thread Geoff Crompton
On Fri, Mar 14, 2003 at 10:39:59PM +0100, Christoph Moench-Tegeder wrote: > If you are using kernel 2.4, you can use ulogd. I never got ulogd running properly. I'm running 0.97-1 from woody, and I was never able to get it to information to any files. Anyone want to comment on the following u

Re: Traffic monitoring

2003-03-14 Thread Geoff Crompton
On Sat, Mar 15, 2003 at 12:22:11AM +0100, Stefan Neufeind wrote: > While we're still in the field of counting and monitoring traffic: > Is there any good way to account traffic on one computer by user? I > searched several times for this but didn't find any good solution. > Some people said it sh

Re: Traffic monitoring

2003-03-14 Thread Stefan Neufeind
While we're still in the field of counting and monitoring traffic: Is there any good way to account traffic on one computer by user? I searched several times for this but didn't find any good solution. Some people said it should be do-able with kernel-modules but nobody knew who had already done

Re: Traffic monitoring

2003-03-14 Thread Stefan Neufeind
You might want to try out the packat "iptraf" and monitor the interface ipsec0. It gives you various overwiews on traffic going over each port in / out as well as other statistics. Only drawback: It only counts as long as you leave it running on console. But I guess leaving it running for e.g.

Re: Traffic monitoring

2003-03-14 Thread Adrian 'Dagurashibanipal' von Bidder
On Sat, 2003-03-15 at 00:22, Stefan Neufeind wrote: > Is there any good way to account traffic on one computer by user? I Hmmm. As long as you have specific protocols, you could always parse the server logs. ftp and http should be no problem, most daemons write a sensible log, I guess. Others (es

Re: Traffic monitoring

2003-03-14 Thread Samuele Giovanni Tonon
On Fri, Mar 14, 2003 at 08:03:17PM +0100, Nils wrote: > Hello everybody! > > I have small but complicated problem. > > How do you monitor what network traffic you have and how much? I want to > be able to see the origin and destination, type and volume. > try ntop traffic-vis darkstat regards

Re: Traffic monitoring

2003-03-14 Thread Phillip Hofmeister
On Fri, 14 Mar 2003 at 08:03:17PM +0100, Nils wrote: > Hello everybody! > > I have small but complicated problem. > > How do you monitor what network traffic you have and how much? I want to > be able to see the origin and destination, type and volume. > > We have two computer labs, with its res

Re: Traffic monitoring

2003-03-14 Thread Geoff Crompton
On Fri, Mar 14, 2003 at 10:39:59PM +0100, Christoph Moench-Tegeder wrote: > If you are using kernel 2.4, you can use ulogd. I never got ulogd running properly. I'm running 0.97-1 from woody, and I was never able to get it to information to any files. Anyone want to comment on the following u

Re: Traffic monitoring

2003-03-14 Thread Geoff Crompton
On Sat, Mar 15, 2003 at 12:22:11AM +0100, Stefan Neufeind wrote: > While we're still in the field of counting and monitoring traffic: > Is there any good way to account traffic on one computer by user? I > searched several times for this but didn't find any good solution. > Some people said it sh

Re: Traffic monitoring

2003-03-14 Thread Christoph Moench-Tegeder
## Nils ([EMAIL PROTECTED]): > How do you monitor what network traffic you have and how much? I want to > be able to see the origin and destination, type and volume. If you are using kernel 2.4, you can use ulogd. If not, there is net-acct. net-acct might apear broken in debian stable, you may ne

Re: Traffic monitoring

2003-03-14 Thread Stefan Neufeind
While we're still in the field of counting and monitoring traffic: Is there any good way to account traffic on one computer by user? I searched several times for this but didn't find any good solution. Some people said it should be do-able with kernel-modules but nobody knew who had already done

Re: Traffic monitoring

2003-03-14 Thread Stefan Neufeind
You might want to try out the packat "iptraf" and monitor the interface ipsec0. It gives you various overwiews on traffic going over each port in / out as well as other statistics. Only drawback: It only counts as long as you leave it running on console. But I guess leaving it running for e.g.

Re: Traffic monitoring

2003-03-14 Thread George Georgalis
On Fri, Mar 14, 2003 at 08:03:17PM +0100, Nils wrote: >We have two computer labs, with its respective ISP-connections, both with >volume based rates. These two sites are also connected to each other >through a VPN. The volume between the two sites should really be marginal. >Due to what we get cha

Re: Traffic monitoring

2003-03-14 Thread andrew lattis
On 2003/03/14 08:03:17PM +0100, Fri, Nils wrote: > > How do you monitor what network traffic you have and how much? I want to > be able to see the origin and destination, type and volume. > > We have two computer labs, with its respective ISP-connections, both with > volume based rates. These two

Re: Traffic monitoring

2003-03-14 Thread Phillip Hofmeister
On Fri, 14 Mar 2003 at 08:03:17PM +0100, Nils wrote: > Hello everybody! > > I have small but complicated problem. > > How do you monitor what network traffic you have and how much? I want to > be able to see the origin and destination, type and volume. > > We have two computer labs, with its res

Re: Traffic monitoring

2003-03-14 Thread Rich Puhek
Nils wrote: Hello everybody! I have small but complicated problem. How do you monitor what network traffic you have and how much? I want to be able to see the origin and destination, type and volume. We have two computer labs, with its respective ISP-connections, both with volume based rates.

Re: Traffic monitoring

2003-03-14 Thread Christoph Moench-Tegeder
## Nils ([EMAIL PROTECTED]): > How do you monitor what network traffic you have and how much? I want to > be able to see the origin and destination, type and volume. If you are using kernel 2.4, you can use ulogd. If not, there is net-acct. net-acct might apear broken in debian stable, you may ne

Re: Traffic monitoring

2003-03-14 Thread George Georgalis
On Fri, Mar 14, 2003 at 08:03:17PM +0100, Nils wrote: >We have two computer labs, with its respective ISP-connections, both with >volume based rates. These two sites are also connected to each other >through a VPN. The volume between the two sites should really be marginal. >Due to what we get cha

Traffic monitoring

2003-03-14 Thread Nils
Hello everybody! I have small but complicated problem. How do you monitor what network traffic you have and how much? I want to be able to see the origin and destination, type and volume. We have two computer labs, with its respective ISP-connections, both with volume based rates. These two site

Re: Traffic monitoring

2003-03-14 Thread andrew lattis
On 2003/03/14 08:03:17PM +0100, Fri, Nils wrote: > > How do you monitor what network traffic you have and how much? I want to > be able to see the origin and destination, type and volume. > > We have two computer labs, with its respective ISP-connections, both with > volume based rates. These two

Re: Traffic monitoring

2003-03-14 Thread Rich Puhek
Nils wrote: Hello everybody! I have small but complicated problem. How do you monitor what network traffic you have and how much? I want to be able to see the origin and destination, type and volume. We have two computer labs, with its respective ISP-connections, both with volume based rates. The

Traffic monitoring

2003-03-14 Thread Nils
Hello everybody! I have small but complicated problem. How do you monitor what network traffic you have and how much? I want to be able to see the origin and destination, type and volume. We have two computer labs, with its respective ISP-connections, both with volume based rates. These two site

Re: Network traffic monitoring. (which IP makes big traffic?)

2001-12-07 Thread Dmitriy
On Thu, Dec 06, 2001 at 12:33:46AM -0800, Alvin Oga wrote: [snip] > > root# trafshow > - shows in a small table ( more readable) the ongoing traffic > ( keeps a ongoing total traffic > Or try ntop . It has a web insterface and shows loads of various statistics. > for the rest of the

Re: Network traffic monitoring. (which IP makes big traffic?)

2001-12-07 Thread Dmitriy
On Thu, Dec 06, 2001 at 12:33:46AM -0800, Alvin Oga wrote: [snip] > > root# trafshow > - shows in a small table ( more readable) the ongoing traffic > ( keeps a ongoing total traffic > Or try ntop . It has a web insterface and shows loads of various statistics. > for the rest of th

Re: Network traffic monitoring. (which IP makes big traffic?)

2001-12-06 Thread Patrick Hsieh
-- Patrick Hsieh--<[EMAIL PROTECTED]>

Re: Network traffic monitoring. (which IP makes big traffic?)

2001-12-06 Thread Patrick Hsieh
Hi, try iptraf, apt-get install iptraf -- Patrick Hsieh--<[EMAIL PROTECTED]>

Re: Network traffic monitoring. (which IP makes big traffic?)

2001-12-06 Thread Alvin Oga
hi cho easiest way is to run the simple tests first... root# tcpdump - watch for the ip# and between which 2 machines root# trafshow - shows in a small table ( more readable) the ongoing traffic ( keeps a ongoing total traffic for the rest of the network monitoring too

Network traffic monitoring. (which IP makes big traffic?)

2001-12-06 Thread Cho Yoonbae
Hi, My network has been very slower than before. Someone suspected the virus like nimda. So I have to found out who makes very high traffic.. I am not network engineer now. What things I have to know? and Which softwares I can select? I'm asking advice for you. Have a nice day. byebye

Re: Network traffic monitoring. (which IP makes big traffic?)

2001-12-06 Thread Patrick Hsieh
-- Patrick Hsieh--<[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Network traffic monitoring. (which IP makes big traffic?)

2001-12-06 Thread Patrick Hsieh
Hi, try iptraf, apt-get install iptraf -- Patrick Hsieh--<[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Network traffic monitoring. (which IP makes big traffic?)

2001-12-06 Thread Alvin Oga
hi cho easiest way is to run the simple tests first... root# tcpdump - watch for the ip# and between which 2 machines root# trafshow - shows in a small table ( more readable) the ongoing traffic ( keeps a ongoing total traffic for the rest of the network monitoring to

Network traffic monitoring. (which IP makes big traffic?)

2001-12-06 Thread Cho Yoonbae
Hi, My network has been very slower than before. Someone suspected the virus like nimda. So I have to found out who makes very high traffic.. I am not network engineer now. What things I have to know? and Which softwares I can select? I'm asking advice for you. Have a nice day. byebye -- T