----- Original Message ----- From: "John Lange [EMAIL PROTECTED] XXXXXXXXXXXXXXX" <XXXXXXXXXXXXXXXXXXXXXXXXX> To: <XXXXXXXXXXXXXXXXXXXXXXX> Sent: Wednesday, 24 April 2002 10:22 a.m. Subject: Re: [Ntop] total traffic over a period (was: Ntop Question)
> I'd like to chime in here and ask a similar related question. > > While MRTG is nice for making pretty graphs, it is not designed for actual > "network accounting". > > I'm desperately looking for a tool that will run on a box and sniff the > traffic on an interface counting total network traffic (in bytes) and > summarizing it by destination IP which can then be used for billing > purposes. One tool designed for this purpose is NeTraMet. It's not that easy to set-up and get going, but it's designed for exactly the problem domain you're talking about. It uses a multiple agent multiple collector style arrangement, so it can monitor remote segments. http://www2.auckland.ac.nz/net/Accounting/ and especially http://www2.auckland.ac.nz/net/Accounting/ntm.Release.note.html It's also (apparently) got a netflow receiver, so in theory, ntop acting as a netflow exporter should be able to talk to it. (In theory - I've no idea if it'll work - but, NeTraMet's own libpcap based sniffer is there to get the job done.) I know you write your own ruleset, allowing any summarisation scheme you want - by connection pair or by one side's IP, for example. Hope this helps, Shannon McCracken. _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
