bandwidth monitoring based on destination IP address

From: Omar Khawaja (omarkhawaja_at_yahoo.com)
Date: 01/28/05

  • Next message: Ty Bodell: "Re: Apache attacks" 
    To: <security-basics@securityfocus.com>
Date: Fri, 28 Jan 2005 16:24:09 -0500

    Hi,

    I have a customer who wants to monitor his bandwidth based on
    destination IP - ideally I would have liked to use MRTG (free, easy to set
    up, works well), but am not sure if MRTG can pull data off a Cisco router /
    PIX firewall via SNMP that will breakdown the usage based on L3 destination.
    I figured if nothing else works, I could use brute force - sniff all the
    traffic and filter based on destination IP and packet size - somehow, that
    doesn't seem like it would be too much fun. I was hoping, with the wealth of
    experience and knowledge in this group, someone would have a more civil
    solution to this. Thanks

    __
    Omar Khawaja, CISSP

  • Next message: Ty Bodell: "Re: Apache attacks"

    Relevant Pages

    • RE: bandwidth monitoring based on destination IP address
      ... > destination IP - ideally I would have liked to use MRTG ... > I figured if nothing else works, I could use brute force - ... > sniff all the traffic and filter based on destination IP and ...
      (Security-Basics)
    • Re: bandwidth monitoring based on destination IP address
      ... OK> destination IP - ideally I would have liked to use MRTG (free, ... As far as I'm familiar with Cisco, ... difficult at all to write your own listener, say, in Perl. ...
      (Security-Basics)
    • Re: bandwidth monitoring based on destination IP address
      ... I have not tried Cisco routers, but have manage to get some tools to ... perform logging and exporting it as netflow. ... > I have a customer who wants to monitor his bandwidth based on> destination IP - ideally I would have liked to use MRTG, but am not sure if MRTG can pull data off a Cisco router /> PIX firewall via SNMP that will breakdown the usage based on L3 destination. ...
      (Security-Basics)