ntop has very good reporting and is relatively easy to set up. Visit their site at http://www.ntop.org/overvi
For best results, install ntop (or whatever monitoring tool) onto a PC connected to the same switch that connects to the Internet. Configure the switch's monitoring port to be the Internet connection port; and configure the mirror-port (the port which receives a copy of all packets in and out of the monitored port) to be the port of the PC. This way ntop will report on all inbound and outbound Internet traffic.
Main Topics
Browse All Topics





by: skcandcoPosted on 2009-06-30 at 09:08:43ID: 24746748
Wireshark - http://www.wireshark.org - Network packet analyzer, if you're working with switches, you won't see all traffic unless you can somehow config a port to monitor all traffic.
You'll also need WinPcap to capture the packets, and i think it's included in the download of Wireshark, but I believe they explain all that in detail on the website.