Real-Time traffic monitor?

[Kurt Buff]

On 8/16/07, Eric F Crist <ecrist at secure-computing.net> wrote:
> Hey all,
>
> I've got a fairly heavy-duty machine doing firewalling for my
> network, and the VAST majority of it's processing power is going
> unused.  As such, I'd like to put X on this box, attach a monitor,
> and display a series of real-time traffic graphs.  Does anyone know
> what the best software to use for this would be?

I wouldn't put anything on it that isn't directly related to its mission.

At most, I'd suggest putting net-snmp on it, denying access from the
untrusted side(s), and polling the box with mrtg/cacti/nagios from
another machine.

Better, I think would be to put ntop on another machine and mirror the
port to which the firewall  is attached.