From owner-freebsd-questions Mon Apr 15 08:59:59 1996 Return-Path: owner-questions Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id IAA29357 for questions-outgoing; Mon, 15 Apr 1996 08:59:59 -0700 (PDT) Received: from nibsc.ac.uk (comsig.nibsc.ac.uk [193.62.43.13]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id IAA29348 for ; Mon, 15 Apr 1996 08:59:55 -0700 (PDT) Received: from chalsig.nibsc.ac.uk by nibsc.ac.uk via ESMTP (940816.SGI.8.6.9/940406.SGI.1(NIBSC)) id QAA17732; Mon, 15 Apr 1996 16:23:51 +0100 Received: by chalsig.nibsc.ac.uk (950511.SGI.8.6.12.PATCH526/client-1.3.1(NIBSC)) id QAA19424; Mon, 15 Apr 1996 16:23:51 +0100 Message-Id: <199604151523.QAA19424@chalsig.nibsc.ac.uk> Subject: Re: Monitoring traffic between two sites, How?? To: PLAZAS_CHRISTIAN@mercury.csg.peachnet.edu (Christian) Date: Mon, 15 Apr 1996 16:23:50 +0100 (BST) Cc: questions@freebsd.org In-Reply-To: <22A5500500@mercury.csg.peachnet.edu> from "Christian" at Apr 15, 96 09:47:32 am From: X-Mailer: ELM [version 2.4 PL21] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-questions@freebsd.org X-Loop: FreeBSD.org Precedence: bulk >From: Christian >To: questions@freebsd.org >Date: Mon, 15 Apr 1996 09:47:32 EST >Subject: Monitoring traffic between two sites, How?? > > I was wondering if there is anyway to use FreeBSD to monitor >traffic between two sites. I wan to be able to see how many users >from certain ip addresses on our network are connected to another ip >address. If possible I would also like to know, the duration of each >session, and what port the users are connected to on the other end. I've just tripped over a tool we're using here, called Interman. It uses the Ethernet interface on the local machine to watch all the network traffic. Unfortunately it is only available in pre-compiled form I've seen SunOS, Solaris2, decultrix, decalpha and sgi available on ftp-sites) and it won't monitor serial line access. >Is this possible using FreeBSD and/or some freely available tools? You might talk them into releasing the source code for doing a port. (The source code is available at some cost). Mac Assistant Systems Adminstrator @nibsc.ac.uk mac@nibsc.ac.uk (also postmaster) Work: 01707 654753 x 285 Everything else: 0956 237670 (any time)