Yes, you can use MRTG for this. Cricket is a next generation replacement
for MRTG as has a lot more features that would make this kind of thing
easier to tailor for your needs. I've got some libpcap code that could be
modified to send alerts when traffic levels change abruptly. Cricket can
already do this, but it is a chore to figure out how to configure it for the
first time if you're not real strong on snmp.

Jacob Martinson

> -----Original Message-----
> From: Guilherme Mesquita [mailto:guylinuxbr.com.br]
> Sent: Thursday, June 07, 2001 7:57 AM
> To: FOCUS-IDSsecurityfocus.com
> Subject: Bandwidth Monitor
>
>
> Yo all!
>
> [ ok I know this is off topic, but I need some suggestions! ]
>
> As far as I know bandwidth monitoring is extremely important
> in a NIDS,
> because you can detect lots of "weird" things on the way,
> like DoS attacks,
> warez dumps, etc. Anyone know a good host-based bandwidth
> monitor, that can
> outputs using GD library? Maybe daily, monthly reports! :) Or
> maybe one that
> inserts data into MySQL. MRTG would be perfect, but can it
> monitor a single
> host withouth a router? (I'm not sure but I presume if you run a snmpd
> daemon you could do this... am I right? havent tryied yet tought)
>
> Thanks for helping.
>
> ,-{ mips
> |-{ Guilherme M.
> `-{ uin#5864338
>

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]