Re: top for tcpdump

2006-05-07 Thread martinko

Dan Nelson wrote:

In the last episode (Apr 20), Low Kian Seong said:

Hmmm the port for trafshow seems unable to fetch the tgz file ?

Probably need to ammend to point it here :

http://www.mirrors.wiretapped.net/security/network-monitoring/trafshow/ ?


I was able to download it just fine:

([EMAIL PROTECTED]) /usr/ports/net/trafshow make fetch
= trafshow-5.2.3.tgz doesn't seem to exist in /usr/ports/distfiles/.
= Attempting to fetch from ftp://ftp.nsk.su/pub/RinetSoftware/.
trafshow-5.2.3.tgz100% of  139 kB   13 kBps 00m00s

Extra mirror locations never hurt, though.



doesn't work here and now either :-(

= trafshow-5.2.3.tgz doesn't seem to exist in /usr/ports/distfiles/.
= Attempting to fetch from ftp://ftp.nsk.su/pub/RinetSoftware/.
fetch: ftp://ftp.nsk.su/pub/RinetSoftware/trafshow-5.2.3.tgz: Not logged in
= Attempting to fetch from 
ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/.
fetch: 
ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/trafshow-5.2.3.tgz: 
File unavailable (e.g., file not found, no access)

= Couldn't fetch it - please try to retrieve this
= port manually into /usr/ports/distfiles/ and try again.
*** Error code 1

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: top for tcpdump

2006-04-20 Thread Michael Grant
Well, I tried ntop.  It seems fairly complicated.  I wasn't expecting
a web interface.

Unfortunatly, after a while it segvs, so I guess it's not so stable. 
Also, lots of complaints about missing XML library and such.

I tried trafshow but it also dumps core on my 4.x system.  Hmm.

But ok, thanks people, some good tools out there.

Michael Grant


On 4/19/06, Kurt Buff [EMAIL PROTECTED] wrote:
 ntop is your best bet.

 http://www.ntop.org, and look in ports for it.

 On 4/19/06, Michael Grant [EMAIL PROTECTED] wrote:
  Does anyone know of a tool like top that displays the open tcp
  connections and sorts them by which is causing the most bandwidth?
 
  I have someone consuming a lot of bandwidth but with so many tcp
  connections, I'm not sure who it is.
 
  Michael Grant
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to [EMAIL PROTECTED]
 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: top for tcpdump

2006-04-19 Thread Kurt Buff
ntop is your best bet.

http://www.ntop.org, and look in ports for it.

On 4/19/06, Michael Grant [EMAIL PROTECTED] wrote:
 Does anyone know of a tool like top that displays the open tcp
 connections and sorts them by which is causing the most bandwidth?

 I have someone consuming a lot of bandwidth but with so many tcp
 connections, I'm not sure who it is.

 Michael Grant
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: top for tcpdump

2006-04-19 Thread Noah Silverman

Look at ettercap.  Not exactly what you asked for, but close..

-N


On Apr 19, 2006, at 11:08 AM, Michael Grant wrote:


Does anyone know of a tool like top that displays the open tcp
connections and sorts them by which is causing the most bandwidth?

I have someone consuming a lot of bandwidth but with so many tcp
connections, I'm not sure who it is.

Michael Grant
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions- 
[EMAIL PROTECTED]




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: top for tcpdump

2006-04-19 Thread Dan Nelson
In the last episode (Apr 19), Michael Grant said:
 Does anyone know of a tool like top that displays the open tcp
 connections and sorts them by which is causing the most bandwidth?
 
 I have someone consuming a lot of bandwidth but with so many tcp
 connections, I'm not sure who it is.

Both trafshow and iftop in ports do this.  Trafshow lets you drill into
individual streams and watch the data flow, and iftop gives you nice
bar graphs. :)

-- 
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: top for tcpdump

2006-04-19 Thread Low Kian Seong
Hmmm the port for trafshow seems unable to fetch the tgz file ?

Probably need to ammend to point it here :

http://www.mirrors.wiretapped.net/security/network-monitoring/trafshow/ ?



On 4/20/06, Dan Nelson [EMAIL PROTECTED] wrote:

 In the last episode (Apr 19), Michael Grant said:
  Does anyone know of a tool like top that displays the open tcp
  connections and sorts them by which is causing the most bandwidth?
 
  I have someone consuming a lot of bandwidth but with so many tcp
  connections, I'm not sure who it is.

 Both trafshow and iftop in ports do this.  Trafshow lets you drill into
 individual streams and watch the data flow, and iftop gives you nice
 bar graphs. :)

 --
 Dan Nelson
 [EMAIL PROTECTED]
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: top for tcpdump

2006-04-19 Thread Dan Nelson
In the last episode (Apr 20), Low Kian Seong said:
 Hmmm the port for trafshow seems unable to fetch the tgz file ?
 
 Probably need to ammend to point it here :
 
 http://www.mirrors.wiretapped.net/security/network-monitoring/trafshow/ ?

I was able to download it just fine:

([EMAIL PROTECTED]) /usr/ports/net/trafshow make fetch
= trafshow-5.2.3.tgz doesn't seem to exist in /usr/ports/distfiles/.
= Attempting to fetch from ftp://ftp.nsk.su/pub/RinetSoftware/.
trafshow-5.2.3.tgz100% of  139 kB   13 kBps 00m00s

Extra mirror locations never hurt, though.

-- 
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: top for tcpdump

2006-04-19 Thread Low Kian Seong
But kudos to your dan ! Nice little tool to add to my utility belt. Now if
it was only as simple as that on my SuSE box ! :)

On 4/20/06, Dan Nelson [EMAIL PROTECTED] wrote:

 In the last episode (Apr 20), Low Kian Seong said:
  Hmmm the port for trafshow seems unable to fetch the tgz file ?
 
  Probably need to ammend to point it here :
 
  http://www.mirrors.wiretapped.net/security/network-monitoring/trafshow/?

 I was able to download it just fine:

 ([EMAIL PROTECTED]) /usr/ports/net/trafshow make fetch
 = trafshow-5.2.3.tgz doesn't seem to exist in /usr/ports/distfiles/.
 = Attempting to fetch from ftp://ftp.nsk.su/pub/RinetSoftware/.
 trafshow-5.2.3.tgz100% of  139 kB   13 kBps
 00m00s

 Extra mirror locations never hurt, though.

 --
 Dan Nelson
 [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]