nanog mailing list archives
Re: Tools classifying network traffic to applications
From: Joe Shen <joe_hznm () yahoo com sg>
Date: Fri, 23 Sep 2005 11:51:46 +0800 (CST)
hi,
Christopher L. Morrow wrote:which can't really tell bittorrent (or ssh or aimor...) over tcp/80 fromhttp over tcp/80... I think Joe's looking forsomething that knows whatprotocols look like below the port number and canspit out numbers forthat... these, it would seem to me, would allrequire in-line trafficcapture or mirrored port (mirrored traffic, notnecessarily an ethernetport mirror) to be effective.
Yes, that's what I want-- Find out what application use what protocol and what number, then apply that result to netflow analysis system which could be used to get statistics of multiple sites.
We can do that up to 2Gbps; http://www.rommon.com/ , BitTorrent, KaZaa, eDonkey, HTTP, etc. supported.
It seems to focus on P2P application. Is there tool to support applications as more as possible( include p2p, voip, web, ftp, network game, etc. ) regards Joe Send instant messages to your online friends http://asia.messenger.yahoo.com
Current thread:
- Tools classifying network traffic to applications Joe Shen (Sep 22)
- Re: Tools classifying network traffic to applications Erik Haagsman (Sep 22)
- Re: Tools classifying network traffic to applications Christopher L. Morrow (Sep 22)
- Re: Tools classifying network traffic to applications Petri Helenius (Sep 22)
- Re: Tools classifying network traffic to applications Christopher L. Morrow (Sep 22)
- Re: Tools classifying network traffic to applications Joe Shen (Sep 22)
- Re: Tools classifying network traffic to applications Christopher L. Morrow (Sep 22)
- Re: Tools classifying network traffic to applications Petri Helenius (Sep 23)
- Re: Tools classifying network traffic to applications Christopher L. Morrow (Sep 22)
- Re: Tools classifying network traffic to applications Erik Haagsman (Sep 22)