Which software can I use to monitor my network?

elvisious · 12-15-2009, 01:16 PM

Hi,

Which software can I use to monitor my network?

I have a Debian server which act as a router / DHCP / DNS / firewall server.

I want to see what the network clients are doing?
For example: the webpages, the ammount of data-traffic, ect.

Greetz

cpplinux · 12-15-2009, 01:21 PM

Wireshark

Elv13 · 12-15-2009, 05:28 PM

Snort is probably the best framework for you. Other x86 firewall, like PFsense and SmoothWall also offer built in monitoring interfaces.

You can also make a script parsing the netstat command to monitor different connection to individual websites. It will be easier to read than follow wireshark output.

chrism01 · 12-15-2009, 06:13 PM

Maybe squid?

xnchao01 · 12-15-2009, 06:29 PM

I often got problem with WireShark

UngaMan · 12-16-2009, 11:08 AM

PErhaps the best idea would be to install a security gateway.

Untangle is a very good, reliable and stable solution for that.

What you need is a computer with a decent processor, 1 GB RAM, 500Gb HD and at least 2 network cards.

It has Spam,spyware, protocol, file type and intrusion filters and a nice web filter, where u can check your users activity.

I use it and is very good.

EricTRA · 12-16-2009, 11:09 AM

I'd go with Squid too, it's highly configurable and with some extra stuff like Sarg you can get reporting out of it.

Kind regards,

Eric