From owner-freebsd-isp@FreeBSD.ORG Thu Aug 3 16:33:21 2006 Return-Path: X-Original-To: freebsd-isp@freebsd.org Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1D23816A4E1 for ; Thu, 3 Aug 2006 16:33:21 +0000 (UTC) (envelope-from mike@coloradosurf.com) Received: from cluster1.bresnan.net (cluster1.bresnan.net [69.145.248.57]) by mx1.FreeBSD.org (Postfix) with ESMTP id CEFEB43D5F for ; Thu, 3 Aug 2006 16:33:20 +0000 (GMT) (envelope-from mike@coloradosurf.com) Received: from [72.174.194.94] (HELO pigskin.com) by fe-2.cluster1.bresnan.net (CommuniGate Pro SMTP 5.0.9) with ESMTPS id 387473557 for freebsd-isp@freebsd.org; Thu, 03 Aug 2006 10:33:20 -0600 Received: from coloradosurf.com (localhost.coloradosurf.com [127.0.0.1]) by pigskin.com (8.13.6/8.13.6) with ESMTP id k73GX8lX050832 for ; Thu, 3 Aug 2006 10:33:09 -0600 (MDT) (envelope-from mike@coloradosurf.com) Received: (from mike@localhost) by coloradosurf.com (8.13.6/8.13.6/Submit) id k73GX7BP050831 for freebsd-isp@freebsd.org; Thu, 3 Aug 2006 10:33:07 -0600 (MDT) (envelope-from mike) Date: Thu, 3 Aug 2006 10:33:07 -0600 From: mike To: freebsd-isp@freebsd.org Message-ID: <20060803163306.GA50785@coloradosurf.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.2.1i X-Spam-Score: -1.442 () ALL_TRUSTED,SPF_HELO_PASS,SPF_PASS X-Scanned-By: MIMEDefang 2.56 on 172.16.2.1 Subject: network sniffer/monitor X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Aug 2006 16:33:21 -0000 I need to put a couple network sniffers on our network. The purpose is to track and log usage. I would hope to discover everything from "who is viewing what website" to typical network trends about usage. I would expect having a span port on a switch forwarding all traffic to a nic on the box listening promiscuously. Something that put it into nice web-viewable tables/stats would be ideal, but before I go trying to re-invent the wheel... It just seems like something that would be "out there". I was wondering if there is something out there (preferably open-source, but not necessarily a requirement) that some folks use and are reasonably happy with? thx, mike