?
Solved

Netowork Monitoring and Databases

Posted on 2006-04-21
6
Medium Priority
?
184 Views
Last Modified: 2010-03-18
I haev a need to monitor traffice on my network, to rpovide usage statistics, and monitor certain "heavy" users. Ihave been using winpcap and ethereal to monitor traffic, however this does not do all I want, as I have a need t monitor traffic for a week at a time, which means splitting files as etherreal cannot handle files this big.

What I would like to do is automaticly import all my capture data into a database, access or MYSQL, however the only way I can do this at the moment is to export capture files to CSV files adn then import into access. What I would like to know, is their either a way to log traffic straight to a csv file, for easy import, or another way to get data into a DB straight away, or another program to do this.

I have tried using SNORT to log to MYSQL, but as far as I can tell, I can only get it to write alerts, rather than all traffic, which I need to produce usage reports.
0
Comment
Question by:sam_cogan
  • 2
  • 2
5 Comments
 
LVL 27

Expert Comment

by:pseudocyber
ID: 16506403
SolarWinds Orion will do this and put the data in an SQL db.  However, it won't do packet level - meaning you can't tell what the traffic was, just how much it was.


http://www.solarwinds.net/Orion/Index.htm
0
 
LVL 3

Author Comment

by:sam_cogan
ID: 16506587
thanks, unfortuanetly I do need to know what the packets are, basicly I need all the info you get in etherreal, but put in a database.
0
 
LVL 27

Expert Comment

by:pseudocyber
ID: 16506656
0
 
LVL 3

Author Comment

by:sam_cogan
ID: 16532822
I found an application called trafadmin which does this, for a reasonable price.
0
 

Accepted Solution

by:
GranMod earned 0 total points
ID: 16774821
PAQed with points refunded (500)

GranMod
Community Support Moderator
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes you might need to configure routing based not only on destination IP address, but also on a combination of destination IP address (or hostname) and destination port number. I will describe a method how to accomplish this with free tools. …
Have you ever set up your wireless router at home or in the office to find that you little pop-up bubble in the bottom right-hand corner of Windows read "IP Conflict - One of more computers on the network have been assigned the following IP address"…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Are you ready to place your question in front of subject-matter experts for more timely responses? With the release of Priority Question, Premium Members, Team Accounts and Qualified Experts can now identify the emergent level of their issue, signal…

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question