Re: Internet usage and monitoring

["Brian Loe" <knobdy () gmail com>]

On 9/27/07, Kurt Buff <kurt.buff () gmail com> wrote:

> NTOP will indeed break out http(s) traffic, but will only give you the
> top three talkers easily - it's a pain to drill down to find bandwidth
> usage for other users, as it's really a tool for measuring bandwidth
> utilization in the aggregate, more than it is for potocol analysis and
> user monitoring. It just looks at packets going by.


For tracking http use, not bandwidth, I've relied on firewall logs.
With a good syslog implementation you can see the top 100 users pretty
easily as well as rate the most visited sites.