LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 02-28-2008, 01:21 AM   #1
saavik
Member
 
Registered: Nov 2001
Location: NRW, Germany
Distribution: SLES11 / FC20/ OES / CentOS
Posts: 600

Rep: Reputation: 32
Network Monitoring


Hello!

I am searching for a good networt monitoring tool. Not a IDS like Snort. I look for something like netshark ( AKA ethereal ) but this tool has also to offer me an overview like etherape.

I would like to use that tool on a VPN gateway to monitor the traffic.

First to see who is causing the traffic ( which etherape could do ) and second to see what is communicated ( which netshard or tcpdump could do).

But well I would like to run this tool in console or like ntop as a service.


I also tought of using ntop but it does ( AFAIK ) not support a view at the packages ?!

Does somebody have an idea what tool could help me ?

BTW the gateway is used to connect to companys via LWL 1GB WAN network.
 
Old 02-28-2008, 03:28 AM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,378

Rep: Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963
well your demands are fairly confused, and netshark appears to be a canadian web design company... try wireshark

If you want to basically record all network traffic then you can fairly simply set up a box to use tcpdump to manage a ring buffer to log blocks of data to disk, and then interrogate the traffic with wireshark. not sure what wireshark isn't doing for you in the equation, but it depends if you want a real time view or an on demand view. of specifics.
 
Old 02-28-2008, 03:57 AM   #3
saavik
Member
 
Registered: Nov 2001
Location: NRW, Germany
Distribution: SLES11 / FC20/ OES / CentOS
Posts: 600

Original Poster
Rep: Reputation: 32
Well sure i was talking about wireshark, sorry!

Yes, i understand what you mean. I think I will combine it with ntop and rrd just to have some graphics.

I just tought there would be a graphical all-in-one tool to have graphic like ntop+rrd+etherape and tcpdump+wireshark in one GUI.
 
Old 02-28-2008, 04:13 AM   #4
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,378

Rep: Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963
nothing that encompassing within the open source market. there are packages like SuperAgent which quite possibly would cover your needs, but they are commerical packages with significant list prices associated with them.
 
Old 02-28-2008, 04:37 AM   #5
Deleriux
Member
 
Registered: Nov 2003
Posts: 89

Rep: Reputation: 16
iptraf can monitor packets in an attended or unattended mode. It measures on a per - ip or per - port basis. So you could use it to see what ips cause the most traffic and what the services are that most use them.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Monitoring network - how slack&lovinit Slackware 1 12-13-2005 02:33 AM
Network monitoring ltodd2 Linux - Software 1 08-05-2005 04:20 AM
Network monitoring shivaligupta Linux - Networking 4 02-02-2005 08:45 AM
network monitoring saavik Linux - Networking 1 07-09-2004 07:43 AM
Network monitoring manubettik Linux - General 1 07-09-2001 05:23 PM


All times are GMT -5. The time now is 03:30 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration