Re: Remotely monitor a switch port...

[JP Vossen <vossenjp () netaxs com>]

On 24 Feb 2004, Ridlon, Michael wrote:

> I am currently using MRTG to log the overall throughput of 19
> buildings.  I haven't read anything that describes how MRTG can log
> protocol information.  Can it?

Errr.  Guess I was wrong on that one.


> If not, do you know of a product that can WITHOUT using a mirrored port?

My only other idea was nstreams [1] but that doesn't look like it does what
you want, and I'm not sure about the mirror port.  If the "sensor" can't see
the traffic, it can't analyize it...


That's all I've got, sorry...
JP

[1] http://www.hsc.fr/ressources/outils/nstreams/index.html.en
------------------------------|:::======|--------------------------------
JP Vossen, CISSP              |:::======|         jp{at}jpsdomain{dot}org
My Account, My Opinions       |=========|       http://www.jpsdomain.org/
------------------------------|=========|--------------------------------
You used to have to reboot the Windows 9.x series every couple of days
because it would crash.  Now you have to reboot Windows 200x or XP every
couple of days because of a patch.  How is that better or more stable?



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users