RE: network statistic tool

From: Noonan, Wesley (Wesley_Noonanat_private)
Date: Mon Jun 02 2003 - 13:54:32 PDT

  • Next message: Alfred Huger: "Re: network statistic tool"

    Also RMON and Netflow can give you a pretty good snapshot as well.
    
    Wes Noonan, MCSE/CCNA/CCDA/NNCSS/Security+
    Senior QA Rep.
    BMC Software, Inc.
    (713) 918-2412
    wnoonanat_private
    http://www.bmc.com
    
    
    > -----Original Message-----
    > From: winter [mailto:shonky_secat_private]
    > Sent: Monday, June 02, 2003 15:43
    > To: PEN-TESTat_private
    > Cc: 'Soeren Ziehe'
    > Subject: RE: network statistic tool
    > 
    > Hi,
    > 
    > Sniffer Pro (nai) has some good protocol distrubition reports. May be a
    > bit
    > heavy for what you want through.
    > 
    > winter
    > 
    > -----Original Message-----
    > From: Soeren Ziehe [mailto:robintonat_private]
    > Sent: Tuesday, 3 June 2003 4:17 AM
    > To: PEN-TESTat_private
    > Subject: network statistic tool
    > 
    > 
    > Hello,
    > 
    > this is not strictly for pentesting. However the people on this ML
    > should know an answer, I'd guess.
    > 
    > We're experiencing severe network disruptions of varying duration and at
    > varying times. Mechanical or electric failures in the network have been
    > ruled out as far as possible.
    > 
    > We would like to have a "look" at the traffic on the network. However we
    > do
    > /not/ want to look at each and every packet. We're
    > interested in the distribution of protocols and distribution of traffic.
    > 
    > Therefore the usual tools like Ethereal, tcpdump, Etherpeek et al. are
    > not meeting our needs.
    > 
    > Does anyone know a tool which samples the traffic and presents summary
    > statistics on network traffic?
    > 
    > Seeing a high percentage of "file sharing" would not really surprise us.
    > But
    > how to get an overview without being lost in the surge of packets
    > such traffic causes?
    > 
    > I know of Etherload, which is a DOS tool, that provided said services. A
    > modern successor should be the tool we're hunting for.
    > 
    > Robinton
    > 
    > --
    > I've asked for kindness and ultimate truth. Still waiting for the answer.
    > --
    > Sich zu Tode zu arbeiten ist die einzige gesellschaftlichanerkannte Form
    > des Selbstmordes.
    > 
    > --------------------------------------------------------------------------
    > -
    > --------------------------------------------------------------------------
    > --
    > 
    > 
    > 
    > --------------------------------------------------------------------------
    > -
    > --------------------------------------------------------------------------
    > --
    
    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Mon Jun 02 2003 - 14:59:58 PDT