From owner-freebsd-net@FreeBSD.ORG Mon Nov 26 23:16:33 2012 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 891AA3BA for ; Mon, 26 Nov 2012 23:16:33 +0000 (UTC) (envelope-from kurt.buff@gmail.com) Received: from mail-ee0-f54.google.com (mail-ee0-f54.google.com [74.125.83.54]) by mx1.freebsd.org (Postfix) with ESMTP id 1F2338FC12 for ; Mon, 26 Nov 2012 23:16:32 +0000 (UTC) Received: by mail-ee0-f54.google.com with SMTP id c13so8186736eek.13 for ; Mon, 26 Nov 2012 15:16:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=Kt69pYSllWVlkM5egGZ+qFMSxlsNilNuLz4XsG3iErg=; b=aC7R+xRDxIo4P+lLQq12o7Wcfa2Kv76Z2HUzI8MdT0uYlF9q/EHSKO/byeNcYTqqhp lhBdoaxK5+CszTUIckXBL819+HdGTa3WTQ7HiBAvsIdBw2Oq7Od0UxTRcWbN+uXXtBXb Fzzf8J4gRxSKuT4ntSlYbDGHH72yCg0Ob2T7yOCqEYDwh5YaxObulbVgYzldiZEyxvYA C3EUBxASNVm2+/2zg+GlYP3n1vkZBytsF7hT3Xvyji+MFB3XKOq4X9GAd1tLS1uPO9v+ J6HS3WXkQMuV5HfH2UEbf9Y8m+aLQgoaJMTZZ3jmO/eNxxgEXXqKWlhG4UUIKMKlVNID PZ3Q== MIME-Version: 1.0 Received: by 10.14.216.193 with SMTP id g41mr50912813eep.37.1353971792245; Mon, 26 Nov 2012 15:16:32 -0800 (PST) Received: by 10.14.97.77 with HTTP; Mon, 26 Nov 2012 15:16:31 -0800 (PST) Date: Mon, 26 Nov 2012 15:16:31 -0800 Message-ID: Subject: Network monitoring with FreeBSD From: Kurt Buff To: freebsd-net@freebsd.org Content-Type: text/plain; charset=UTF-8 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Nov 2012 23:16:33 -0000 If this belongs on a different list, please let me know... I've long used ntop, but the current version in ports is missing a feature that I found incredibly useful, and I'm seeking an alternative. I'm running several small FreeBSD 9 boxen monitoring my HP switches on their mirror ports, and ntop 3.x could give the the top 3 talkers when I clicked on a graph of the network load statistics, but under 4.x that no longer seems to be the case, and 5.x isn't in the ports tree yet. I'd love to dive deeper into who is talking, and what traffic is passing on my network, and I'm pretty dedicated to using FreeBSD, as I've not liked any Linux I've ever touched. I've perused ports/net and ports/net-mgmt, and there are a bewildering number of options. If anyone has recommendations, I'd like to hear it. Kurt