Snort mailing list archives

RE: Using snort for network stats?


From: "DeBerry, Casey" <Casey.DeBerry () trizetto com>
Date: Tue, 28 Oct 2003 13:20:39 -0700

Check out iptraf
Small footprint with many options.
 
http://cebu.mozcom.com/riker/iptraf/download.html
<http://cebu.mozcom.com/riker/iptraf/download.html> 

-----Original Message-----
From: Michael Miller [mailto:michael.miller () state co us]
Sent: Tuesday, October 28, 2003 11:29 AM
To: 'snort-users () lists sourceforge net'
Subject: [Snort-users] Using snort for network stats?


Since I'm using snort to capture nearly everything that enters and exists
our network, I was curious to see if there was a utility to show network
metrics based on that data. Google didn't find much (or I asked the wrong
questions) and Ethereal is choking on the large dataset, so that's out. I'm
mostly interested in effective thruput, percentages of TCP/UDP/ICMP data,
breakdown of traffic by protocol, etc.
 
 


Current thread: