Traffic Anaylsis 1

[Hondy]

Hi

I have a bandwidth monitor that measures the inbound/outbound traffic on the router (MRTG).

Recently the inbound traffic has increased. Does anyone know of any tools I can use to get a breakdown of the traffic so I can try to see what the increase is due to?

I have surfcontrol, but that is only limited use in this instance.

Thanks!

 

[gb0mb]

I my self would just dump the inbound traffic using TCP Dump or Wireshark. Then just do a visual analysis.

Gb0mb

........99.9% User Error........
Ubuntu -- African for I can't install Gentoo

 

[Hondy]

yeh i did that, i was hoping that a "live" tool would show conversations in real time rather than clipping a moment in time.

It would be handy for alerting against streaming etc.

Cheers

 

[Jsmith222]

capture those packet and see that in packetbone

 

[Hondy]

looks good, but not released yet - pricing not available until summer :s

 

[gb0mb]

Found this page while doing a quick look for what you need.

http://www.networksecurityjournal.c...security-tools-applications-resources-041007/

Started looking through it, tons of potentially useful tools, just havent found one that meets your needs. I only briefly looked tho.

Gb0mb

........99.9% User Error........
Ubuntu -- African for I can't install Gentoo

 

[Hondy]

thanks mate, I'll have a look around there

 

[iprog]

Hi,
to monitor the network there is also another tool not mentioned in the link of gb0mb. The tool is open source and called ntop:

http://www.ntop.org.

If you want to extract the contents of a traffic, and then web pages, email, FTP, etc. there is an open source tool called Xplico:

http://www.xplico.org

Enjoy