[Snort-users] off-thread

Mark W. Jeanmougin markjx at ...11827...
Wed Mar 7 16:15:30 EST 2012


On Wed, Mar 7, 2012 at 15:43, John York <YorkJ at ...7109...> wrote:
> A university manager has asked for a something to tell what the students are doing (in general) on the university network.  How much Google, Wikipedia, Facebook, Blackboard, etc.  It would be easy to use Snort to mark the packets, but that would give events instead of bandwidth.  I've looked at a couple of commercial packet shaping tools, but they don't allow custom rules.  Any ideas?
>

This sounds like something better addressed with squid or a proxy server...

MJ




More information about the Snort-users mailing list