[Snort-users] Off topic a little - usage by port?

Gene Yoo gyoo at ...4371...
Tue Oct 22 13:53:04 EDT 2002


Chris Reining wrote:
> Rich,
> Check out iptraf or ntop:
> http://cebu.mozcom.com/riker/iptraf/
> http://www.ntop.org/
> 
> Chris
> 
> On Tue, 22 Oct 2002, Rich Adamson wrote:
> 
>  : I know this is a little off topic, but the folks that hang out here
>  : may know...
>  : 
>  : I'm looking for a software app that can be used to monitor all traffic
>  : mirrored from a switch port (as an example), that would accumulate
>  : usage statistics by IP and tcp/udp port number. It would be great if
>  : the app could be configured to gather stats for "either" source port
>  : or destination port. Logging the usage stats to a file on some
>  : predetermined interval would be helpfull.
>  : 
>  : Example:
>  :   Source IP       Proto Dest Port Packets
>  :   --------------- ----- --------- ---------
>  :   123.123.123.123 udp   53        452
>  :                   tcp   445       10
>  :                   tcp   110       4,000
>  :                   tcp   80        1,234
>  :                   icmp  ---       22
>  : 
>  : Does anyone know of such an app or have any thoughts about something
>  : that might be close that I can modify to do this? 
>  : 
>  : Doesn't need to be pretty, and I don't care if it runs under Linux or 
>  : Win2k; either would be fine.
>  : 
>  : Rich
>  : radamson at ...2127...
> 
> 
> 
> -------------------------------------------------------
> This sf.net emial is sponsored by: Influence the future 
> of Java(TM) technology. Join the Java Community 
> Process(SM) (JCP(SM)) program now. 
> http://ad.doubleclick.net/clk;4699841;7576301;v?http://www.sun.com/javavote
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 

RH80 comes with IPTRAF...  ** gene





More information about the Snort-users mailing list