Penetration Testing mailing list archives

RE: network statistic tool


From: "winter" <shonky_sec () hotpop com>
Date: Tue, 3 Jun 2003 06:42:36 +1000

Hi,

Sniffer Pro (nai) has some good protocol distrubition reports. May be a bit
heavy for what you want through.

winter

-----Original Message-----
From: Soeren Ziehe [mailto:robinton () alahele de] 
Sent: Tuesday, 3 June 2003 4:17 AM
To: PEN-TEST () SECURITYFOCUS COM
Subject: network statistic tool


Hello,

this is not strictly for pentesting. However the people on this ML  
should know an answer, I'd guess.

We're experiencing severe network disruptions of varying duration and at  
varying times. Mechanical or electric failures in the network have been  
ruled out as far as possible.

We would like to have a "look" at the traffic on the network. However we do
/not/ want to look at each and every packet. We're  
interested in the distribution of protocols and distribution of traffic.

Therefore the usual tools like Ethereal, tcpdump, Etherpeek et al. are  
not meeting our needs.

Does anyone know a tool which samples the traffic and presents summary  
statistics on network traffic?

Seeing a high percentage of "file sharing" would not really surprise us. But
how to get an overview without being lost in the surge of packets  
such traffic causes?

I know of Etherload, which is a DOS tool, that provided said services. A
modern successor should be the tool we're hunting for.

Robinton

-- 
I've asked for kindness and ultimate truth. Still waiting for the answer.
-- 
Sich zu Tode zu arbeiten ist die einzige gesellschaftlichanerkannte Form  
des Selbstmordes.

---------------------------------------------------------------------------
----------------------------------------------------------------------------



---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: