Network Monitoring

[Shizzle Cash]

On Fri, Feb 6, 2009 at 8:24 AM, Bart Silverstrim
<bsilver at chrononomicon.com>wrote:

> kapil singh kushwah wrote:
> > I don't want to use squid beacuse network is  already behind the
> > Hardware fire wall.
>
> Proxies aren't firewalls...
>
> --
> ubuntu-users mailing list
> ubuntu-users at lists.ubuntu.com
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
>

Yes, to get the information you want (at least as it pertains to web
traffic), a proxy is the way to go.  Squid is good for this task.  It won't
catch https traffic, but will at least catch http.  Squid can be configured
(with a little bit of work) to output it's files in a format that something
like awstats can parse, if you want nice, PHB-friendly reports, etc.

The other option is to use ntop on your firewall.  ntop would be better as
it would catch *all* traffic, as opposed to just web traffic as is the case
with squid.  If your firewall is something you pieced together yourself,
ntop is available for nearly all *NIX variants, I believe.  If it's a
"black-box" firewall (an off-the-shelf solution), you might be out of luck,
unless it offers something similar or the functionality is available as an
add-on.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20090206/fb28e326/attachment.html>