tools for monitoring network traffic

2014-09-19 Thread Markus Rosjat

Hello,

just a simple question with a properbly more complicated answer. Are 
there tools out there to simply monitor the network traffic for a 
webserver so you get information about which domain caused which traffic 
over a week or a day?


I know I could go and reinvent the wheel by using pf and other tools but 
since Im a lazy guy I want to look for a solution that is already out there.


Thx for the help :)

Regards

--
Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de

G+H Webservice GbR Gorzolla, Herrmann
Königsbrücker Str. 70, 01099 Dresden

http://www.ghweb.de
fon: +49 351 8107220   fax: +49 351 8107227

Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before you 
print it, think about your responsibility and commitment to the ENVIRONMENT



Re: tools for monitoring network traffic

2014-09-19 Thread Ville Valkonen
Hello Markus, have you checked pflow?

Regards, Ville
On Sep 19, 2014 4:11 PM, Markus Rosjat ros...@ghweb.de wrote:

 Hello,

 just a simple question with a properbly more complicated answer. Are there
 tools out there to simply monitor the network traffic for a webserver so
 you get information about which domain caused which traffic over a week or
 a day?

 I know I could go and reinvent the wheel by using pf and other tools but
 since Im a lazy guy I want to look for a solution that is already out
there.

 Thx for the help :)

 Regards

 --
 Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de

 G+H Webservice GbR Gorzolla, Herrmann
 Königsbrücker Str. 70, 01099 Dresden

 http://www.ghweb.de
 fon: +49 351 8107220   fax: +49 351 8107227

 Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before
 you print it, think about your responsibility and commitment to the
 ENVIRONMENT



Re: tools for monitoring network traffic

2014-09-19 Thread Monah Baki
I use Bro and Argus

http://qosient.com/argus/
http://bro.org

On Fri, Sep 19, 2014 at 9:10 AM, Markus Rosjat ros...@ghweb.de wrote:

 Hello,

 just a simple question with a properbly more complicated answer. Are there
 tools out there to simply monitor the network traffic for a webserver so
 you get information about which domain caused which traffic over a week or
 a day?

 I know I could go and reinvent the wheel by using pf and other tools but
 since Im a lazy guy I want to look for a solution that is already out
there.

 Thx for the help :)

 Regards

 --
 Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de

 G+H Webservice GbR Gorzolla, Herrmann
 Königsbrücker Str. 70, 01099 Dresden

 http://www.ghweb.de
 fon: +49 351 8107220   fax: +49 351 8107227

 Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before
 you print it, think about your responsibility and commitment to the
 ENVIRONMENT



Re: tools for monitoring network traffic

2014-09-19 Thread Chris Cappuccio
Markus Rosjat [ros...@ghweb.de] wrote:
 Hello,
 
 just a simple question with a properbly more complicated answer. Are there
 tools out there to simply monitor the network traffic for a webserver so you
 get information about which domain caused which traffic over a week or a
 day?
 

What about your access log?

 I know I could go and reinvent the wheel by using pf and other tools but
 since Im a lazy guy I want to look for a solution that is already out there.
 

Unless each web site runs on a different IP address, this might be nearly 
impossible to do at the network level



Re: tools for monitoring network traffic

2014-09-19 Thread Paul S.

+1 to access log.

But well, if you must -- there is this https://code.google.com/p/mod-sflow/

You won't get any extra data out of it that a CustomLog directive 
wouldn't give you, though.


On 9/20/2014 午前 12:29, Chris Cappuccio wrote:

Markus Rosjat [ros...@ghweb.de] wrote:

Hello,

just a simple question with a properbly more complicated answer. Are there
tools out there to simply monitor the network traffic for a webserver so you
get information about which domain caused which traffic over a week or a
day?


What about your access log?


I know I could go and reinvent the wheel by using pf and other tools but
since Im a lazy guy I want to look for a solution that is already out there.


Unless each web site runs on a different IP address, this might be nearly 
impossible to do at the network level