From: Collin Douglas (Collin.Douglasmidfirst.com)
Date: Fri Sep 10 2004 - 16:13:08 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Before you invest too heavily in a suite of tools, I think you should take a
look at NTOP at http://www.ntop.org

It's a pretty nifty tool and sounds like it could handle quite a bit of what
you're wanting to do. It's not a built-in web server so you can attach to
it from anywhere to view the network statistics for the segment you're
monitoring.

Combine this with a couple of OSS sniffers (like ethereal and sniffit) and
you have yourself a supprisingly powerful tool.

You might also check out the Thin Client 6600 model at
http://www.premieradvance.com. I have one of their older model thin clients
running Fedora Core 2 and I have a nice selection of different network
utilities installed such as ntop, snort and tethereal (text version of
ethereal). This system gives me the ability to quickly deploy a monitor in
a wiring closet or other tight place and let it gather information for a few
days. The end result is quite impressive.

This may not be the solution for you if you're looking for something that
can generate pretty reports to be printed out. While all of the NTOP
functionality is available through a web interface, I have never actually
tried to print anything out. While it might look just fine, I can't vouch
for that particular capability.

-Collin

-----Original Message-----
From: Keith [mailto:pcsolutions101yahoo.com]
Sent: Thursday, September 09, 2004 3:54 PM
To: focus-mssecurityfocus.com
Subject: Network Monitor/sniffer

To the group:

I am in the market for a good network monitor/diagnostic software package
that will tell me everything there is to know about my network. I need the
software to tell me things such as what protocols are running and who is
running them, how much network bandwidth is used, what MAC's are taking how
much bandwidth, give me the ability to graph the output, etc... I'm looking
for a robust specialized tool or suite, not a package that does lots of
things but nothing well.

Any recommendations would be appreciated.

KK

---------------------------------------------------------------------------
---------------------------------------------------------------------------

-----------------------------------------
Privileged/Confidential information may be contained in this message. If
you are not the addressee indicated in this message (or responsible for
delivery of the message to such person), you may not copy or deliver this
message to anyone. In such case, you should destroy this message and
kindly notify the sender by reply e-mail. Please advise immediately if you
or your employer does not consent to Internet messages of this kind.
Opinions, conclusions and other information in this message that do not
relate to the official business of my firm shall be understood as neither
given or endorsed by it.

---------------------------------------------------------------------------
---------------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]