mailing list archives
Re: Network monitoring PC.
From: "WALI" <hkhasgiwale () gmail com>
Date: Sat, 3 Nov 2007 12:20:28 +0400
I use OpenSuse linux built where most if the things that you mentioned,
wireshark, ntop, nmap etc, comes as inbuilt and only needs to be selected
from the Yast,
rest of the rpm packages are also easy to install and run.
Give a try..you might not be disappointed and anyways, no windows should be
a platform of choice for all monitoring and logging needs. Gives you an
extra secure choice in casd all else fails.
----- Original Message -----
From: "Kurt Buff" <kurt.buff () gmail com>
To: "Nick Vaernhoej" <nick.vaernhoej () capitalcardservices com>
Cc: <security-basics () securityfocus com>
Sent: Saturday, November 03, 2007 3:01 AM
Subject: Re: Network monitoring PC.
On 11/2/07, Nick Vaernhoej <nick.vaernhoej () capitalcardservices com> wrote:
I am looking for ideas for software ideal for installation on a PC which
will be used for monitoring our LAN/WAN.
The WAN is over a MPLS circuit so nothing out of the ordinary needed for
The PC will be plugged into a mirrored port when needed, so what I am
thinking is a Linux build with ntop, wireshark/tcpdump and what else?
I am not opposed to a Windows install at all.
Just looking for ideas.
Single workstation, mirrored port, only monitoring, not mitigating or
Thank you and have a great weekend!
"Quidquid latine dictum sit, altum sonatur."
This really depends on what set of things/conditions you're looking to
Bandwidth utilization/network health? ntop you've mentioned, but
smokeping also comes to mind, though that is not a packet monitoring
tool, per se, so doesn't need to sit on a span/mirror port.
What else are you looking to get out of it?
Intrusion detection? snort is useful