Penetration Testing mailing list archives

Re: network statistic tool


From: opus <opus () ircore com>
Date: Mon, 2 Jun 2003 17:03:03 -0500 (CDT)

Have you looked at IPAudit
http://ipaudit.sourceforge.net/ipaudit-web/index.html
is just tracks the traffic, doesn't keep any packets, just the record of 
it's existance and protocol, source destination and a little more info.

Opus

On 2 Jun 2003, Soeren Ziehe wrote:

Hello,

this is not strictly for pentesting. However the people on this ML  
should know an answer, I'd guess.

We're experiencing severe network disruptions of varying duration and at  
varying times. Mechanical or electric failures in the network have been  
ruled out as far as possible.

We would like to have a "look" at the traffic on the network.
However we do /not/ want to look at each and every packet. We're  
interested in the distribution of protocols and distribution of traffic.

Therefore the usual tools like Ethereal, tcpdump, Etherpeek et al. are  
not meeting our needs.

Does anyone know a tool which samples the traffic and presents summary  
statistics on network traffic?

Seeing a high percentage of "file sharing" would not really surprise us.
But how to get an overview without being lost in the surge of packets  
such traffic causes?

I know of Etherload, which is a DOS tool, that provided said services.
A modern successor should be the tool we're hunting for.

Robinton



-- 
    .~.
    /V\
   /( )\
   ^^-^^


---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: