I run my ntop box with two NICs - one with an IP address that I use to talk with the machine, the other is unnumbered and connected to the mirror port. The firewall is connected to a switch dedicated to a subnet between the firewall and my backbone switch. That subnet contains, among other things, my squid proxy and my Maia Mailguard box, which is the gateway to my Exchange box, and filters spam and viruses coming in from the world.
On Tue, Nov 25, 2008 at 6:05 PM, Chyka, Robert <[EMAIL PROTECTED]> wrote: > What if your router is your firewall too ? Do you span the port that the > router plugs into the core switch and run ntop on that spanned port? > > Do I give the ntop machine a ip address on the same subnet as the router > ethernet port? > > Thanks... > > -----Original Message----- > From: "Eldridge, Dave" <[EMAIL PROTECTED]> > To: "NT System Admin Issues" <[email protected]> > Sent: 11/25/08 9:02 PM > Subject: RE: Looking for packet shaping/viewer appliance/sotware > > Jesse I agree with Kurt completely if that is all you are looking at. > I have ntop running on a vm/XP machine. I catch high usage people all > the time. > This very simple and free program will show you immediately who's > talking. > > -----Original Message----- > From: Kurt Buff [mailto:[EMAIL PROTECTED] > Sent: Tuesday, November 25, 2008 6:55 PM > To: NT System Admin Issues > Subject: Re: Looking for packet shaping/viewer appliance/sotware > > If all you're looking to do is see bandwidth usage by protocol, and > other monitoring tasks, such as who your top 3 talkers are, etc., I > can heartily recommend putting up a *nix box on a mirror/span port on > the switch to which your firewall is connected, and running ntop. > > ntop is really dang cool - http://www.ntop.org/overfview.html > > On Tue, Nov 25, 2008 at 12:26 PM, [EMAIL PROTECTED] > <[EMAIL PROTECTED]> wrote: >> >> At one of my clients we have the need to try and determine how the > internet >> is being utilized. The 10mb is constantly swamped and I have a hard > time >> believing it's for work-related reasons. >> >> I'm looking at putting in some kind of software/device that analyzes > the >> internet traffic and can tell me how much is being used for basic web >> surfing, streaming video, webcam usage, p2p programs, internet radio, > or >> whatever else might be happening. >> >> I know packeteer has a product that does this, but we are NOT looking > to >> "shape" the bandwidth at this time, merely view it so we can make a >> determination of what to do from there. They used to have a "viewer" >> product in the past long ago called PacketPup but I'm not sure if they > do >> anymore... >> >> Any recommendations on how I can determine what the internet is being > used >> for as it relates to Applications? >> >> Thanks >> JR >> >> >> -------------------------------------------------------------------- >> myhosting.com - Premium Microsoft(R) Windows(R) and Linux web and > application >> hosting - http://link.myhosting.com/myhosting >> >> >> >> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >> > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > > This message contains confidential information and is intended only for the > intended recipient(s). If you are not the named recipient you should not > read, distribute or copy this e-mail. Please notify the sender immediately > via e-mail if you have received this e-mail by mistake; then, delete this > e-mail from your system. > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
