[Snort-users] IP Traffic

Rick black.hawk at ...7874...
Thu Jan 2 06:58:59 EST 2003


I've already tried ntop but it groups all IP protocol non tcp/udp based in 
one group called "Other Procotols".
Do you know if Darkstat or ipstat are able to work at IP level (in my case 
IPSec IP/50)?

Thanks

Regards,

Riccardo

At 12.35 02/01/2003, you wrote:
>On Thu, Jan 02, 2003 at 12:18:31PM +0100, Rick wrote:
> > Hi all,
> >
> > i would like to account all IPSec and VoIP traffic of my network, this for
> > generate some statistics for net % usage.
> >
> > Do you know if exists an application that works with Snort to do that?
> >
> > Thank you
> >
> > Regards,
> >
> > Rick
>
>Snort could probibly do that, but it is not the tool of choice. Ntop[1]
>and Darkstat[2] comes to mind. I have a page on my private website
>that lists cool tools that uses libpcap.. Have a look at it @
>http://proxy.11a.nu/fun_with_pcap.php
>
>Best regards
>  Michael Boman
>
>PS
>  Feel free to suggest more cool tools to use
>DS
>
>[1] http://www.ntop.org/
>[2] http://members.optushome.com.au/emikulic/net/darkstat/
>
>--
>Michael Boman
>Security Architect, SecureCiRT (A SBU of Z-Vance Pte Ltd)
>http://www.securecirt.com





More information about the Snort-users mailing list