Re: Network Traffic Collection

2012-03-02 Thread Mukom Akong T.
Hi Ali On Sat, Feb 25, 2012 at 6:14 PM, Maverick myeaddr...@gmail.com wrote: Thanks Mukom for the wonderful guide, this is really helpful. I have few questions about ntop though. How can I get access to the log files generated by ntop and do my own parsing rather than looking for webbased

Re: Network Traffic Collection

2012-02-25 Thread Maverick
Thanks Mukom for the wonderful guide, this is really helpful. I have few questions about ntop though. How can I get access to the log files generated by ntop and do my own parsing rather than looking for webbased results that are generated. Are there any programs available that do parsing of

Re: Network Traffic Collection

2012-02-24 Thread Mukom Akong T.
On Fri, Feb 24, 2012 at 12:20 AM, Matlock, Kenneth L matlo...@exempla.org wrote: Netflow + netflow collector. +1 This guide should give you a good start. http://techowto.files.wordpress.com/2008/09/ntop-guide.pdf Regards -- Mukom Akong Tamon __ If we can't BREATH, we'll die.

Re: Network Traffic Collection

2012-02-23 Thread Jeroen Massar
On 2012-02-23 21:11 , Maverick wrote: Hello, I am trying to collect traffic traffic from pcap file and store it in a database but really confused how to organize it. Should I organize it on connection basis/ flow basis or IP basis. It might be an effort to write a customized traffic

RE: Network Traffic Collection

2012-02-23 Thread Matlock, Kenneth L
...@gmail.com] Sent: Thursday, February 23, 2012 1:19 PM To: Jeroen Massar Cc: nanog@nanog.org Subject: Re: Network Traffic Collection I want to be able to see information like how much traffic an ip send over a period of time, what machines it talked to etc from this perspective it should be IP based

Re: Network Traffic Collection

2012-02-23 Thread Suresh Rajagopalan
On Thu, Feb 23, 2012 at 12:19 PM, Maverick myeaddr...@gmail.com wrote: I want to be able to see information like how much traffic an ip send over a period of time, what machines it talked to etc from this perspective it should be IP based but I would really like to know how other people do it.

Re: Network Traffic Collection

2012-02-23 Thread Mike Lyon
Random thought, anyone ever used Splunk for this kind of thing? -mike Sent from my iPhone On Feb 23, 2012, at 10:30, Suresh Rajagopalan sraj...@gmail.com wrote: On Thu, Feb 23, 2012 at 12:19 PM, Maverick myeaddr...@gmail.com wrote: I want to be able to see information like how much traffic

Re: Network Traffic Collection

2012-02-23 Thread Jason Lixfeld
Splunk is an amazing tool and did an awesome thing and introduced a free license in 4.3. I'm using it at two sites now and I'm loving it! On 2012-02-23, at 3:34 PM, Mike Lyon wrote: Random thought, anyone ever used Splunk for this kind of thing? -mike Sent from my iPhone On Feb 23,

Re: Network Traffic Collection

2012-02-23 Thread Jeroen Massar
On 2012-02-23 21:34 , Mike Lyon wrote: Random thought, anyone ever used Splunk for this kind of thing? Various folks have, the problem of course comes down to processing power, thus you'll need to throw a lot of hardware against it to be able to process traffic in a decent network. Check

Re: Network Traffic Collection

2012-02-23 Thread Mike Lyon
Run it with hadoop in EC2? Sent from my iPhone On Feb 23, 2012, at 10:52, Jeroen Massar jer...@unfix.org wrote: On 2012-02-23 21:34 , Mike Lyon wrote: Random thought, anyone ever used Splunk for this kind of thing? Various folks have, the problem of course comes down to processing power,

Re: Network Traffic Collection

2012-02-23 Thread Justin M. Streiner
On Thu, 23 Feb 2012, Maverick wrote: I want to be able to see information like how much traffic an ip send over a period of time, what machines it talked to etc from this perspective it should be IP based but I would really like to know how other people do it. Truth is that most people

Re: Network Traffic Collection

2012-02-23 Thread Scott Weeks
--- myeaddr...@gmail.com wrote: -- From: Maverick myeaddr...@gmail.com It might be an effort to write a customized traffic analysis tool like wireshark with only required functionality. I would really appreciate I want to be able to see information like how much traffic an

Re: Network Traffic Collection

2012-02-23 Thread Carlos Alcantar
@nanog.org Subject: Re: Network Traffic Collection I want to be able to see information like how much traffic an ip send over a period of time, what machines it talked to etc from this perspective it should be IP based but I would really like to know how other people do it. Best, Ali On Thu, Feb 23

Re: Network Traffic Collection

2012-02-23 Thread Peter Phaal
On Thu, Feb 23, 2012 at 1:59 PM, Justin M. Streiner strei...@cluebyfour.org wrote: On Thu, 23 Feb 2012, Maverick wrote: I want to be able to see information like how much traffic an ip send over a period of time, what machines it talked to etc from this perspective it should be IP based but I

Re: Network Traffic Collection

2012-02-23 Thread Owen DeLong
PCAP is not well suited to what you describe. Most people use Sflow/Cflow/... instead. Owen On Feb 23, 2012, at 12:19 PM, Maverick wrote: I want to be able to see information like how much traffic an ip send over a period of time, what machines it talked to etc from this perspective it