Re: [d-security] Traffic monitoring
On Fri, Mar 14, 2003 at 08:03:17PM +0100, Nils wrote:
> How do you monitor what network traffic you have and how much? I want to
> be able to see the origin and destination, type and volume.
Try looking for "netflow". It's a traffic accounting protocol invented
by Cisco and supported by most Cisco routers and Linux via ntop or
nprobe. Mostly used by ISPs.
Accounts ip-proto,address,port,as-number,tcpflags,num_packets,num_bytes.
It is normally installed on the border routers of the ISP facing the
customer and the upstream providers interfaces (i.e. backbone traffic
is not accounted) but you can alter this setup.
bye,
-christian-
--
Christian Hammers WESTEND GmbH | Internet-Business-Provider
Technik CISCO Systems Partner - Authorized Reseller
Lütticher Straße 10 Tel 0241/701333-11
ch@westend.com D-52064 Aachen Fax 0241/911879
Reply to: