Network IP analysis?

Howdy,
Does anyone know of any good IP monitoring tools that can log/monitor the
TYPES of IP traffic going across your netowork (ie: one that logs tcp/udp and
esp port numbers/types of traffic)? Something that could query a router

The "etherman" tool suite out of Curtin University in Austalia is a free
start.

would be nice, although I am unaware of any routers that support such a feature.

I just recently snagged MRTG, a freeware SMNP package that will poll a router
allowing snmp access. It seems like a simple traffic monitoring/averaging/history
program that is too simple to use, but provides easy to understand information
in a visual context. Cisco's are really easy to configure for snmp polling
by MRTG.

I'm sorry I can't post the ftp sites. Can't think of them off the top
of my head and too late to search. Apologies. Maybe someone else knows
firsthand?

Regards,

http://www.ee.ethz.ch/~oetiker/webtools/mrtg/mrtg.html

I'm sorry I can't post the ftp sites. Can't think of them off the top
of my head and too late to search. Apologies. Maybe someone else knows
firsthand?

MRTG is available at:
http://www.ee.ethz.ch/~oetiker/webtools/mrtg/mrtg.html.
MRTG requires perl5 and the GD Graphics Library which can be found at
Short Term Loans | Boutell.co.uk | Borrow £50 - £2500 Instantly. Very easy to use, and quite a lot you can get
out of it, although it really only shows the amount of traffic on a
network, not the specific types of traffic that are going through link.

MRTG also has a mailing list, which can be subscribed to by sending mail
to mrtg-request@list.ee.ethz.ch with "subscribe" as the subject. Also, if
it's still on the shelves, Linux Journal did a great story on Network
monitoring tools in the June 1997 issue.

Martin Hannigan (hannigan@firefly.net) Voice: 617.528.1099

Joe Shaw - jshaw@insync.net
NetAdmin - Insync Internet Services

MRTG requires perl5 and the GD Graphics Library which can be found at
Short Term Loans | Boutell.co.uk | Borrow £50 - £2500 Instantly. Very easy to use, and quite a lot you can get
out of it, although it really only shows the amount of traffic on a
network, not the specific types of traffic that are going through link.

MRTG has its limitations but it is not so bad and is definitely easy
to use. It is set up to graph two variables on the same axis, being
designed just for traffic monitoring; but of course you can do
single-variable graphs by setting them both the same, or one to zero.
SNMP queries are done internally and it has hooks to query other
things as well.

You'll probably want to set `WithPeak' and `Options: bits'. It's also
a good idea to write some m4 macros to generate the mrtg.cfg once you
decide how you want the output to look.

It's not the ultimate graphing program but it's free and easy and
you'll have it up fast until when and if you can get the ultimate
graphing program running. Works well enough.