Re: Session statistics

[Andreas Östling <andreaso () it su se>]

On Thu, 21 Aug 2003, John Creegan wrote:

> I've searched the mail list archives and the snort website looking for
> the tool I need, and have not yet found it.  Before I go off and create
> this tool, I'd like to know if there already is a tool which can take
> advantage of the session.log data to tell me:
>      1. Who the top talkers are
>      2. Where the hotspots on the network are.

It doesn't use session.log data, but it sounds like you need Argus.
It can do the above things and much, much, much more.
http://www.qosient.com/argus/
or recent snapshots at ftp://ftp.qosient.com/dev/argus-2.0/

/Andreas


-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users