On 5/16/07, Frans Haarman <[EMAIL PROTECTED]> wrote:
Hello,
I was wondering about using pf to monitor what is happening on our
network. The idea is to connect a pf machine to the management port on
the switch.
You might be better served using a tool designed for this purpose,
such as Argus:
http://www.qosient.com/argus/
The Argus toolkit is designed to run on a Unix host, monitor an
interface, and "get protocol statistics per connected ip going towards
our servers", among many other things. With some limitations, the
collection and reporting tools work on OpenBSD (I've been testing the
release candidates for Argus 3.0 and have one open bug with 'ratop').
Long ago geek00L mentioned working on a port, once Argus is released
as 3.0 I'd be willing to assist in making a port.
Kevin
