brent timothy saner on 1 Apr 2009 12:33:30 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] ntop cool


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

jeff wrote:
> Through all the playing around I've done with network monitoring, I 
> never tried ntop.  I read an article on it and thought it might be an 
> interesting idea.
> 
> I got it working but it's of limited use on a switched network.  I hate 
> that.  The results were cool enough to want to see them for the whole 
> network so I put on my spelunking helmet and navigated the dark caverns 
> of switch documentation, in search of how to mirror ports.
(SNIP)

just as a side note for the readers, you wouldn't need to mirror ports
if you have a linux router upstream from the switch, since all traffic
passes through it. you can put ntop on that. :)

also useful for sniffing/capturing traffic (as well as a thousand and
one other uses).
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAknTwWgACgkQ8u2Zh4MtlQoH1QCgtJ0xZedUJJ7dtUSdLr64s3PM
oOYAn3dMalq2/SC5wBdRwgx+3l3vv4Ja
=Li0c
-----END PGP SIGNATURE-----
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug