Security Basics mailing list archives

Re: bandwidth monitoring based on destination IP address


From: Brandon Lee <lee.bran () gmail com>
Date: Tue, 1 Feb 2005 06:45:03 +0800

Hi Omar

I have not tried Cisco routers, but have manage to get some tools to
perform logging and exporting it as netflow.  Below are some links
which i hope might be of some help to you:

http://lionet.info/ipcad/
http://sourceforge.net/projects/flavio/

related links:
http://www.ba.cnr.it/~paolo/pmacct/
http://mindrot.org/softflowd.html
http://www.seanadams.com/95/
http://www.chrisgrout.com/mylinks.html

Hope these links are of some help to you.


-- 
rgds
Brandon


On Fri, 28 Jan 2005 16:24:09 -0500, Omar Khawaja <omarkhawaja () yahoo com> wrote:
Hi,

I have a customer who wants to monitor his      bandwidth based on
destination IP - ideally I would have liked to use MRTG (free, easy to set
up, works well), but am not sure if MRTG can pull data off a Cisco router /
PIX firewall via SNMP that will breakdown the usage based on L3 destination.
I figured if nothing else works, I could use brute force - sniff all the
traffic and filter based on destination IP and packet size - somehow, that
doesn't seem like it would be too much fun. I was hoping, with the wealth of
experience and knowledge in this group, someone would have a more civil
solution to this. Thanks

__
Omar Khawaja, CISSP




Current thread: