RE: Bandwidth monitor/management

["Craig Van Tassle" <craig () codestorm org>]

If you are looking at just "dumb" bandwith monitoring look up ntop for
linux.  I would put it on a hub (or the span port of your switch) and use
that to monitor the bandwidth usage.

Kinda like this
                 /---------------------\
                 |Computer running ntop|
                 \---------------------/
                           |
--------\     /--------\   |   /------\     /------------\
internet|-----|firewall|-------|switch|-----|internal lan|
--------/     \--------/       \------/     \------------/

That will watch the bandwidth for everything on your internal and now much
traffic is between your firewall and you switch/internal lan.


(Sorry I'm beyond bored at work and you all get to view my ascii art now)

Craig


On Fri, March 31, 2006 4:03 pm, Keenan Smith wrote:
> Since a discussion on MRTG is ongoing, my reading of the docs indicate
> that
> it has to be pointed at an SNMP host to work properly.
>
> I was looking for something that simply monitored net traffic and reported
> on load, utilization, etc.
>
> Am I misunderstanding what MRTG does or just net monitoring in general?
>
> Thanks in advance
> Keenan Smith
>
> -----Original Message-----
> From: Gettin Phunky [mailto:phunkodelic () gmail com]
> Sent: Friday, March 31, 2006 9:52 AM
> To: craig () codestorm org
> Cc: security-basics () securityfocus com
> Subject: Re: Bandwidth monitor/management
>
>
> We use MRTG too.  Easy to setup and opensource.  Can use it to monitor all
> kinds of stuff.
>
> On 3/29/06, Craig Van Tassle <craig () codestorm org> wrote:
> > On Tue, March 28, 2006 11:28 pm, anon () somefin de wrote:
> > > I hope this is the right list to post this. we are looking for
> > > hardware bandwidth monitoring/management solution. Has any of you
> > > have experince with that ? Another thing i want to know is in which
> > > sceneario a hardware bandwidth solution should be deployed? ie it
> > > should be deployed after or before the firewall in the network or it
> > > should be deployed in the lan ? any inputs are appreciated. Thanks
> > > in advance.
> >
> > Well it all depends on what exacly you are watching for? You are
> > looking to see what is going in/out from the lan to the internet or
> > howmuch traffic is being stopped from your firewall.  It all depends
> > really on waht exacly you want to do.
> >
> >
> > ----------------------------------------------------------------------
> > -----
> > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> > The Norwich University program offers unparalleled Infosec management
> > education and the case study affords you unmatched consulting
> > experience.
> > Tailor your education to your own professional goals with degree
> > customizations including Emergency Management, Business Continuity
> Planning,
> > Computer Emergency Response Teams, and Digital Investigations.
> >
> > http://www.msia.norwich.edu/secfocus
> > ----------------------------------------------------------------------
> > -----
>
> ---------------------------------------------------------------------------
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The Norwich University program offers unparalleled Infosec management
> education and the case study affords you unmatched consulting experience.
> Tailor your education to your own professional goals with degree
> customizations including Emergency Management, Business Continuity
> Planning,
>
> Computer Emergency Response Teams, and Digital Investigations.
>
> http://www.msia.norwich.edu/secfocus
> ---------------------------------------------------------------------------



---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------