Traffic analysis ports?

[Robert Watson]

On Thu, 18 Sep 2003, Josef Karthauser wrote:

> I'm looking for some software to basically analyse the traffic I've got
> going over a particular pipe so that I can work out whether or what to
> traffic shape.  Can anyone recommend anything? 

I tend to cut my own BPF-based tools as needed to measure particular types
of traffic, but that's not a very scalable approach.  There are commercial
products, such as NAI's Sniffer tool (I think it can read playback from
pcap output), which claim to be able to help with that sort of analysis,
but I've never really used them.  For a "first cut" visualization of
currently active network connections, tools such as ntop, trafshow,
tcpstat, etc, can actually provide surprising amounts of insight.

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
robert at fledge.watson.org      Network Associates Laboratories