Penetration Testing mailing list archives

RE: network statistic tool


From: "Noonan, Wesley" <Wesley_Noonan () bmc com>
Date: Mon, 2 Jun 2003 15:54:32 -0500

Also RMON and Netflow can give you a pretty good snapshot as well.

Wes Noonan, MCSE/CCNA/CCDA/NNCSS/Security+
Senior QA Rep.
BMC Software, Inc.
(713) 918-2412
wnoonan () bmc com
http://www.bmc.com


-----Original Message-----
From: winter [mailto:shonky_sec () hotpop com]
Sent: Monday, June 02, 2003 15:43
To: PEN-TEST () securityfocus com
Cc: 'Soeren Ziehe'
Subject: RE: network statistic tool

Hi,

Sniffer Pro (nai) has some good protocol distrubition reports. May be a
bit
heavy for what you want through.

winter

-----Original Message-----
From: Soeren Ziehe [mailto:robinton () alahele de]
Sent: Tuesday, 3 June 2003 4:17 AM
To: PEN-TEST () SECURITYFOCUS COM
Subject: network statistic tool


Hello,

this is not strictly for pentesting. However the people on this ML
should know an answer, I'd guess.

We're experiencing severe network disruptions of varying duration and at
varying times. Mechanical or electric failures in the network have been
ruled out as far as possible.

We would like to have a "look" at the traffic on the network. However we
do
/not/ want to look at each and every packet. We're
interested in the distribution of protocols and distribution of traffic.

Therefore the usual tools like Ethereal, tcpdump, Etherpeek et al. are
not meeting our needs.

Does anyone know a tool which samples the traffic and presents summary
statistics on network traffic?

Seeing a high percentage of "file sharing" would not really surprise us.
But
how to get an overview without being lost in the surge of packets
such traffic causes?

I know of Etherload, which is a DOS tool, that provided said services. A
modern successor should be the tool we're hunting for.

Robinton

--
I've asked for kindness and ultimate truth. Still waiting for the answer.
--
Sich zu Tode zu arbeiten ist die einzige gesellschaftlichanerkannte Form
des Selbstmordes.

--------------------------------------------------------------------------
-
--------------------------------------------------------------------------
--



--------------------------------------------------------------------------
-
--------------------------------------------------------------------------
--

---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: