[Snort-users] off-thread

Jason Brvenik jasonb at ...1935...
Wed Mar 7 16:12:49 EST 2012


What about using mrtg to gather the stats from netflow and the snort
engine to isolate the interesting flows then doing a little reporting
magic?

On Wed, Mar 7, 2012 at 3:43 PM, John York <YorkJ at ...7109...> wrote:
> My apologies in advance...
>
> A university manager has asked for a something to tell what the students are doing (in general) on the university network.  How much Google, Wikipedia, Facebook, Blackboard, etc.  It would be easy to use Snort to mark the packets, but that would give events instead of bandwidth.  I've looked at a couple of commercial packet shaping tools, but they don't allow custom rules.  Any ideas?
>
> Thanks
> John
>
>
> ------------------------------------------------------------------------------
> Virtualization & Cloud Management Using Capacity Planning
> Cloud computing makes use of virtualization - but cloud computing
> also focuses on allowing computing to be delivered as a service.
> http://www.accelacomm.com/jaw/sfnl/114/51521223/
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!



-- 
Regards,

Jason.




More information about the Snort-users mailing list