Re: Lan traffic Monitoring tools

["Paul Cousins" <paul@pimper.fsnet.co.uk>]

Best thing you  can do is install squid and then set it up as a transparent
proxy and use itpables to route all prot 80 traffic through it. ntop and
mrtg will not give you the level of detail you are after on there own
however when used with squid youll be able to get all the info youll ever
need on what clients are doing what.

Unless the clients you wish to minito are SNMP enabled you not going to able
to get much data form them using mrtg et al also you will not just capture
net traffic but all lan traffic will also been shown so again this would not
be close to what you need. defianltey look into squid and transparent
proxying.

______________________________________________
No trees were harmed in posting this message. However, a large number of
electrons were terribly inconvenienced.

"Sir, we're surrounded."
"Excellent. We can attack in any direction!"

----- Original Message -----
From: "Sundaram Ramasamy" <sun@percipia.com>
To: <netfilter@lists.netfilter.org>
Sent: Friday, February 07, 2003 2:46 PM
Subject: Lan traffic Monitoring tools


> Hi All,
>
> I have firewall based on iptables (Redhat 7.3) Custom build kernel. I want
> to
>  monitor the my LAN traffic, basically I need a report
>  PC IP Address : web site it accessing, date and time
>
> I am not using any proxy in my gateway machine.
>
>  I checked out ntop, mrtg. I would like to know which is best  tool for
this
> propose.
>
> -RS
>
>
>
>