--- [email protected] wrote: From: Brendan Mannella <[email protected]>
Wondering what the best/preferred method of capturing network traffic for analysis is. Using a mirrored port or actually sending the flows directly to a collector. Looking for pros and cons of each approach. Also if you can give me some examples of whats used as a collector. I have been looking at ntop on the open source side and inmon traffic sentinel on the commercial side. --------------------------------------------- Be careful with NTop. Turn everything off and turn on only what you need little by little. It can consume a LOT of CPU cycles. However, it gives you a LOT of information as well... scott ------------------------ ------------------------- ----------------------- _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
