From rjonkman@ittc.ukans.edu Wed Dec 15 17:35:38 1999 Date: Wed, 18 Aug 1999 11:02:47 -0500 From: Roelof JT Jonkman <rjonkman@ittc.ukans.edu> To: unisog@sans.org Cc: Mark Reimer <Mark.Reimer@pbi.ab.ca> Subject: Re: Network (Ethernet) Monitors X-Mailer: exmh version 2.0.3 3/22/99
Mark, Etherpeek seems ok for that, we use it on and off. http://www.aggroup.com mrtg is sort of a neat tool too. http://ee-staff.ethz.ch/~oetiker/webtools/mrtg/mrtg.html roel Systems & Network hacker ITTC/University of Kansas
From RGolshan@Central.UH.EDU Wed Dec 15 17:35:38 1999 Date: Wed, 18 Aug 1999 11:01:31 -0500 From: "Golshan, Reza" <RGolshan@Central.UH.EDU> To: 'Mark Reimer ' <Mark.Reimer@pbi.ab.ca>, "'unisog@sans.org '" <unisog@sans.org> Cc: "'reza@uh.edu'" <reza@uh.edu> Subject: RE: Network (Ethernet) Monitors X-Mailer: Internet Mail Service (5.5.2448.0)
[ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] Take a look at; http://www.telecomm.uh.edu/statistics.html which uses; http://ee-staff.ethz.ch/~oetiker/webtools/mrtg/mrtg.html Reza -----Original Message----- From: Mark Reimer To: unisog@sans.org Sent: 8/18/99 9:41 AM Subject: Network (Ethernet) Monitors Hi all, I'm looking at software for monitoring my local network(s). I'm just looking for general monitoring (how much bandwidth is being used, number of frames etc). Ideally it would catch Ethernet errors as well. I'm looking for it to run on DOS or Windows 95/NT. Any recommendations will be appreciated. Mark ======================================== Mark Reimer, MCSE PC Specialist Information Services, Prairie Bible Institute Phone: 403-443-5511 Ext: 3476 Fax: 403-443-5540 E-mail: mark.reimer@pbi.ab.ca
From vanepp@sfu.ca Wed Dec 15 17:35:38 1999 Date: Wed, 18 Aug 1999 09:58:43 -0700 (PDT) From: Peter Van Epp <vanepp@sfu.ca> To: unisog@sans.org Subject: Re: Network (Ethernet) Monitors X-Mailer: ELM [version 2.4 PL24]
I believe NeTraMet still supports a DOS version ... ftp://ftp.auckland.ac.nz/pub/iawg/NeTraMet/ Peter Van Epp / Operations and Technical Support Simon Fraser University, Burnaby, B.C. Canada
From milindj@mastek.com Wed Dec 15 17:35:38 1999 Date: Wed, 18 Aug 1999 22:14:27 +0530 From: Milind A. Joshi <milindj@mastek.com> To: unisog@sans.org, Mark Reimer <Mark.Reimer@pbi.ab.ca> Subject: RE: Network (Ethernet) Monitors X-Mailer: Internet Mail Service (5.0.1460.8)
[ Part 1, Text/PLAIN 32 lines. ] [ Unable to print this part. ] Try an evaluation copy of statscout - www.statscout.com There are may others... Milind ---------- From: Mark Reimer[SMTP:Mark.Reimer@pbi.ab.ca] Sent: August 18, 1999 8:11 PM To: unisog@sans.org Subject: Network (Ethernet) Monitors Hi all, I'm looking at software for monitoring my local network(s). I'm just looking for general monitoring (how much bandwidth is being used, number of frames etc). Ideally it would catch Ethernet errors as well. I'm looking for it to run on DOS or Windows 95/NT. Any recommendations will be appreciated. Mark ======================================== Mark Reimer, MCSE PC Specialist Information Services, Prairie Bible Institute Phone: 403-443-5511 Ext: 3476 Fax: 403-443-5540 E-mail: mark.reimer@pbi.ab.ca
From stoermer@unt.edu Wed Dec 15 17:35:38 1999 Date: Wed, 18 Aug 1999 13:32:26 -0500 From: Chris Stoermer <stoermer@unt.edu> To: unisog@sans.org Subject: Re: Network (Ethernet) Monitors X-Mailer: Pegasus Mail for Win32 (v3.11)
If you have manageable switches, you usually get software with them. I am testing two CentreCOM 8126XL 100Mg switches which come with "onboard" management tools via telnet and web. This particular model can break down switch traffic by each port. You can also disable each port via the management tool. Date sent: Wed, 18 Aug 1999 08:41:37 -0600 From: Mark Reimer <Mark.Reimer@pbi.ab.ca> Subject: Network (Ethernet) Monitors To: unisog@sans.org Hi all, I'm looking at software for monitoring my local network(s). I'm just looking for general monitoring (how much bandwidth is being used, number of frames etc). Ideally it would catch Ethernet errors as well. I'm looking for it to run on DOS or Windows 95/NT. Any recommendations will be appreciated. Mark ======================================== Mark Reimer, MCSE PC Specialist Information Services, Prairie Bible Institute Phone: 403-443-5511 Ext: 3476 Fax: 403-443-5540 E-mail: mark.reimer@pbi.ab.ca Chris Stoermer Computer Support Specialist III College of Business Administration University of North Texas Email: stoermer@unt.edu Office: 940.369.8613 Fax: 940.565.4930 WEB: http://www.coba.unt.edu
From houserd@odc.edu Wed Dec 15 17:35:38 1999 Date: Wed, 18 Aug 1999 16:11:38 -0400 From: "Houser, Dan" <houserd@odc.edu> To: "'unisog@sans.org'" <unisog@sans.org> Subject: RE: Network (Ethernet) Monitors X-Mailer: Internet Mail Service (5.5.2448.0)
[ The following text is in the "iso-8859-1" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ]
From: Doug Hughes [mailto:Doug.Hughes@Eng.Auburn.EDU] Subject: Re: Network (Ethernet) Monitors
If you have switches, host based monitoring of bandwidth is moot.
DOug
IMHO.... Not. I am still constrained by the backbone bandwidth, regardless of the front-end solution. A common misconception held by networking professionals when they migrate from hubs to switches is that you now have full bandwidth utilization. Unfortunately, it only gives you full bandwidth to the backbone, which may not buy you much... (I had a client once who couldn't understand why their 10/100 switch wasn't providing better performance than their hub had been. Of course, it was because the switch was plugged into a legacy 10MB backplane, just like the old hub had been. The maximum throughput was still 10MB shared.) ddh
From Fred.Kiani@EP01.EGGINC.COM Wed Dec 15 17:35:38 1999 Date: Wed, 18 Aug 1999 14:29:30 -0400 From: "Kiani, Fred" <Fred.Kiani@EP01.EGGINC.COM> To: 'Mark Reimer' <Mark.Reimer@pbi.ab.ca>, unisog@sans.org Subject: RE: Network (Ethernet) Monitors X-Mailer: Internet Mail Service (5.5.2448.0)
It really depends how much money you would be willing to spend. I have not checked HP OpenView on DOS but it is working fine on NT. Best regards, Fred Kiani -----Original Message----- From: Mark Reimer [SMTP:Mark.Reimer@pbi.ab.ca] Sent: Wednesday, August 18, 1999 10:42 AM To: unisog@sans.org Subject: Network (Ethernet) Monitors Hi all, I'm looking at software for monitoring my local network(s). I'm just looking for general monitoring (how much bandwidth is being used, number of frames etc). Ideally it would catch Ethernet errors as well. I'm looking for it to run on DOS or Windows 95/NT. Any recommendations will be appreciated. Mark ======================================== Mark Reimer, MCSE PC Specialist Information Services, Prairie Bible Institute Phone: 403-443-5511 Ext: 3476 Fax: 403-443-5540 E-mail: mark.reimer@pbi.ab.ca
From Doug.Hughes@Eng.Auburn.EDU Wed Dec 15 17:35:38 1999 Date: Wed, 18 Aug 1999 15:58:51 -0500 (CDT) From: Doug Hughes <Doug.Hughes@Eng.Auburn.EDU> To: unisog@sans.org Subject: RE: Network (Ethernet) Monitors X-Mailer: TkMail 4.0beta9
From: Doug Hughes [mailto:Doug.Hughes@Eng.Auburn.EDU] Subject: Re: Network (Ethernet) Monitors
If you have switches, host based monitoring of bandwidth is moot.
DOug
IMHO....
Not. I am still constrained by the backbone bandwidth, regardless of the front-end solution.
A common misconception held by networking professionals when they migrate from hubs to switches is that you now have full bandwidth utilization. Unfortunately, it only gives you full bandwidth to the backbone, which may not buy you much... (I had a client once who couldn't understand why their 10/100 switch wasn't providing better performance than their hub had been. Of course, it was because the switch was plugged into a legacy 10MB backplane, just like the old hub had been. The maximum throughput was still 10MB shared.)
I think you missed my point. If you have a switch installed, then any host based monitoring will show you (max) the bandwidth to that 'one' machine. All other bandwidth utilization is completely invisible. Of course, if all traffic is to that one machine (unlikely in most cases, but possible from your one example if you disregard any Internet traffic), then you would see it all. I would regard this as highly unusual, unless that one machine is a firewall or choke gateway of some sort. That was not indicated in the original post, but also possible I suppose. I'm not sure that I would want to turn my firewall into a network/bandwidth management platform as well. (I'm pretty sure I wouldn't..) In most common cases attempting to measure backbone bandwidth from a single machine is apt to be... unproductive.. (based upon measuring using software and a NIC in promiscuous mode on a single host as was inferred from the original posting) In all cases a smart switch will be able to tell you where your bandwidth is being used. You just have to know how to collect the data (or use the vendor provided software). RMON is a big plus here. +----------------------------------------------------------------------+ +---+ Brought to you by the undead Sinister mailing list +---+ To send to the list mail "sinister@missprint.org". To unsubscribe send "unsubscribe sinister" or "unsubscribe sinister-digest" to "majordomo@missprint.org". WWW: http://www.missprint.org/sinister +-+ "legion of bedroom saddo devotees" "tech-heads and students" +-+ +-+ "the cardie wearing biscuit nibbling belle & sebastian list" +-+ +-+ "sinsietr is a bit freaky" - stuart david, looper +-+ +----------------------------------------------------------------------+