Re: semi-ot: network monitoring tools

["Dobbins, Roland" <rdobbins () arbor net>]

On Oct 2, 2013, at 2:29 AM, John Levine wrote:

> These people are plenty smart, but don't have a lot of money.

Enable NetFlow, and use some open-source NetFlow collection/analysis system like nfdump/nfsen, etc.

dnstop and the like for DNS can be pretty revealing, as well.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

          Luck is the residue of opportunity and design.

                       -- John Milton