RE: Bandwidth monitor/management

["David Gillett" <gillettdavid () fhda edu>]

  The usual thing is to point it at a router or switch to read the
SNMP stats.

  Switches and routers "see" all network traffic much more clearly
than any single workstation, but they don't generally have nice
user interfaces for monitoring.

  You can monitor traffic in much more detail with a sniffer, but 
you'll probably have to do some switch configuration to make sure
that the traffic you're interested in is available to your sniffer
host (and this can impact performance).  Most sniffers are good
for detail, but won't give you the high-level overview that you'd
like to see to tell you where to sniff.

David Gillett


> -----Original Message-----
> From: Keenan Smith [mailto:kc_smith () clark net] 
> Sent: Friday, March 31, 2006 2:03 PM
> To: 'Gettin Phunky'; craig () codestorm org
> Cc: security-basics () securityfocus com
> Subject: RE: Bandwidth monitor/management
>
> Since a discussion on MRTG is ongoing, my reading of the docs 
> indicate that it has to be pointed at an SNMP host to work properly.
>
> I was looking for something that simply monitored net traffic 
> and reported on load, utilization, etc.
>
> Am I misunderstanding what MRTG does or just net monitoring 
> in general?
>
> Thanks in advance
> Keenan Smith
>
> -----Original Message-----
> From: Gettin Phunky [mailto:phunkodelic () gmail com]
> Sent: Friday, March 31, 2006 9:52 AM
> To: craig () codestorm org
> Cc: security-basics () securityfocus com
> Subject: Re: Bandwidth monitor/management
>
>
> We use MRTG too.  Easy to setup and opensource.  Can use it 
> to monitor all
> kinds of stuff.
>
> On 3/29/06, Craig Van Tassle <craig () codestorm org> wrote:
> > On Tue, March 28, 2006 11:28 pm, anon () somefin de wrote:
> > > I hope this is the right list to post this. we are looking for 
> > > hardware bandwidth monitoring/management solution. Has any of you 
> > > have experince with that ? Another thing i want to know 
> is in which 
> > > sceneario a hardware bandwidth solution should be deployed? ie it 
> > > should be deployed after or before the firewall in the 
> network or it 
> > > should be deployed in the lan ? any inputs are 
> appreciated. Thanks 
> > > in advance.
> >
> > Well it all depends on what exacly you are watching for? You are 
> > looking to see what is going in/out from the lan to the internet or 
> > howmuch traffic is being stopped from your firewall.  It 
> all depends 
> > really on waht exacly you want to do.
> ----------------------------------------------------------------------
> > -----
> > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> > The Norwich University program offers unparalleled Infosec 
> management
> > education and the case study affords you unmatched 
> consulting experience.
> > Tailor your education to your own professional goals with degree
> > customizations including Emergency Management, Business Continuity
> Planning,
> > Computer Emergency Response Teams, and Digital Investigations.
> >
> > http://www.msia.norwich.edu/secfocus
> ----------------------------------------------------------------------
> > -----
>
> --------------------------------------------------------------
> -------------
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The Norwich University program offers unparalleled Infosec management 
> education and the case study affords you unmatched consulting 
> experience. 
> Tailor your education to your own professional goals with degree 
> customizations including Emergency Management, Business 
> Continuity Planning,
>
> Computer Emergency Response Teams, and Digital Investigations. 
>
> http://www.msia.norwich.edu/secfocus
> --------------------------------------------------------------
> -------------
>
>
> --------------------------------------------------------------
> -------------
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The Norwich University program offers unparalleled Infosec management 
> education and the case study affords you unmatched consulting 
> experience. 
> Tailor your education to your own professional goals with degree 
> customizations including Emergency Management, Business 
> Continuity Planning, 
> Computer Emergency Response Teams, and Digital Investigations. 
>
> http://www.msia.norwich.edu/secfocus
> --------------------------------------------------------------
> -------------


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------