RE: Statistics for Firewalls

[Joe Matusiewicz <joem () nist gov>]

At 02:54 PM 9/11/02, John Adams wrote:

> I had similiar problems with ntop. What I usually do is to filter out of
> the traffic I deem useless with a tcpdump expression.
>
> For example, do you really need to know every DNS connection? Hell no,
> filter that. Filter NNTP. Filter all SMTP that isn't bound for your main
> mail server. Filter out NetBIOS.

Actually, that wasn't an option.  At the time I was most interested in 
bandwidth usage to decide on whether to get a bigger pipe.  I needed to see 
the whole picture.

-- Joe

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards