Re: top for tcpdump
Dan Nelson wrote: In the last episode (Apr 20), Low Kian Seong said: Hmmm the port for trafshow seems unable to fetch the tgz file ? Probably need to ammend to point it here : http://www.mirrors.wiretapped.net/security/network-monitoring/trafshow/ ? I was able to download it just fine: ([EMAIL PROTECTED]) /usr/ports/net/trafshow make fetch = trafshow-5.2.3.tgz doesn't seem to exist in /usr/ports/distfiles/. = Attempting to fetch from ftp://ftp.nsk.su/pub/RinetSoftware/. trafshow-5.2.3.tgz100% of 139 kB 13 kBps 00m00s Extra mirror locations never hurt, though. doesn't work here and now either :-( = trafshow-5.2.3.tgz doesn't seem to exist in /usr/ports/distfiles/. = Attempting to fetch from ftp://ftp.nsk.su/pub/RinetSoftware/. fetch: ftp://ftp.nsk.su/pub/RinetSoftware/trafshow-5.2.3.tgz: Not logged in = Attempting to fetch from ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/. fetch: ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/trafshow-5.2.3.tgz: File unavailable (e.g., file not found, no access) = Couldn't fetch it - please try to retrieve this = port manually into /usr/ports/distfiles/ and try again. *** Error code 1 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: top for tcpdump
Well, I tried ntop. It seems fairly complicated. I wasn't expecting a web interface. Unfortunatly, after a while it segvs, so I guess it's not so stable. Also, lots of complaints about missing XML library and such. I tried trafshow but it also dumps core on my 4.x system. Hmm. But ok, thanks people, some good tools out there. Michael Grant On 4/19/06, Kurt Buff [EMAIL PROTECTED] wrote: ntop is your best bet. http://www.ntop.org, and look in ports for it. On 4/19/06, Michael Grant [EMAIL PROTECTED] wrote: Does anyone know of a tool like top that displays the open tcp connections and sorts them by which is causing the most bandwidth? I have someone consuming a lot of bandwidth but with so many tcp connections, I'm not sure who it is. Michael Grant ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: top for tcpdump
ntop is your best bet. http://www.ntop.org, and look in ports for it. On 4/19/06, Michael Grant [EMAIL PROTECTED] wrote: Does anyone know of a tool like top that displays the open tcp connections and sorts them by which is causing the most bandwidth? I have someone consuming a lot of bandwidth but with so many tcp connections, I'm not sure who it is. Michael Grant ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: top for tcpdump
Look at ettercap. Not exactly what you asked for, but close.. -N On Apr 19, 2006, at 11:08 AM, Michael Grant wrote: Does anyone know of a tool like top that displays the open tcp connections and sorts them by which is causing the most bandwidth? I have someone consuming a lot of bandwidth but with so many tcp connections, I'm not sure who it is. Michael Grant ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions- [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: top for tcpdump
In the last episode (Apr 19), Michael Grant said: Does anyone know of a tool like top that displays the open tcp connections and sorts them by which is causing the most bandwidth? I have someone consuming a lot of bandwidth but with so many tcp connections, I'm not sure who it is. Both trafshow and iftop in ports do this. Trafshow lets you drill into individual streams and watch the data flow, and iftop gives you nice bar graphs. :) -- Dan Nelson [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: top for tcpdump
Hmmm the port for trafshow seems unable to fetch the tgz file ? Probably need to ammend to point it here : http://www.mirrors.wiretapped.net/security/network-monitoring/trafshow/ ? On 4/20/06, Dan Nelson [EMAIL PROTECTED] wrote: In the last episode (Apr 19), Michael Grant said: Does anyone know of a tool like top that displays the open tcp connections and sorts them by which is causing the most bandwidth? I have someone consuming a lot of bandwidth but with so many tcp connections, I'm not sure who it is. Both trafshow and iftop in ports do this. Trafshow lets you drill into individual streams and watch the data flow, and iftop gives you nice bar graphs. :) -- Dan Nelson [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: top for tcpdump
In the last episode (Apr 20), Low Kian Seong said: Hmmm the port for trafshow seems unable to fetch the tgz file ? Probably need to ammend to point it here : http://www.mirrors.wiretapped.net/security/network-monitoring/trafshow/ ? I was able to download it just fine: ([EMAIL PROTECTED]) /usr/ports/net/trafshow make fetch = trafshow-5.2.3.tgz doesn't seem to exist in /usr/ports/distfiles/. = Attempting to fetch from ftp://ftp.nsk.su/pub/RinetSoftware/. trafshow-5.2.3.tgz100% of 139 kB 13 kBps 00m00s Extra mirror locations never hurt, though. -- Dan Nelson [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: top for tcpdump
But kudos to your dan ! Nice little tool to add to my utility belt. Now if it was only as simple as that on my SuSE box ! :) On 4/20/06, Dan Nelson [EMAIL PROTECTED] wrote: In the last episode (Apr 20), Low Kian Seong said: Hmmm the port for trafshow seems unable to fetch the tgz file ? Probably need to ammend to point it here : http://www.mirrors.wiretapped.net/security/network-monitoring/trafshow/? I was able to download it just fine: ([EMAIL PROTECTED]) /usr/ports/net/trafshow make fetch = trafshow-5.2.3.tgz doesn't seem to exist in /usr/ports/distfiles/. = Attempting to fetch from ftp://ftp.nsk.su/pub/RinetSoftware/. trafshow-5.2.3.tgz100% of 139 kB 13 kBps 00m00s Extra mirror locations never hurt, though. -- Dan Nelson [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]