Sinister: test2

7 Jan 2000

      ...
From rjonkman@ittc.ukans.edu Wed Dec 15 17:35:38 1999
Date: Wed, 18 Aug 1999 11:02:47 -0500
From: Roelof JT Jonkman <rjonkman@ittc.ukans.edu>
To: unisog@sans.org
Cc: Mark Reimer <Mark.Reimer@pbi.ab.ca>
Subject: Re: Network (Ethernet) Monitors 
X-Mailer: exmh version 2.0.3 3/22/99
Mark,

Etherpeek seems ok for that, we use it on and off.
http://www.aggroup.com
mrtg is sort of a neat tool too.
http://ee-staff.ethz.ch/~oetiker/webtools/mrtg/mrtg.html 

roel
Systems & Network hacker
ITTC/University of Kansas
...
From RGolshan@Central.UH.EDU Wed Dec 15 17:35:38 1999
Date: Wed, 18 Aug 1999 11:01:31 -0500
From: "Golshan, Reza" <RGolshan@Central.UH.EDU>
To: 'Mark Reimer ' <Mark.Reimer@pbi.ab.ca>,
     "'unisog@sans.org '" <unisog@sans.org>
Cc: "'reza@uh.edu'" <reza@uh.edu>
Subject: RE: Network (Ethernet) Monitors
X-Mailer: Internet Mail Service (5.5.2448.0)
[ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Take a look at;
http://www.telecomm.uh.edu/statistics.html
which uses;
http://ee-staff.ethz.ch/~oetiker/webtools/mrtg/mrtg.html

Reza 

-----Original Message-----
From: Mark Reimer
To: unisog@sans.org
Sent: 8/18/99 9:41 AM
Subject: Network (Ethernet) Monitors

Hi all,

I'm looking at software for monitoring my local network(s). I'm just
looking
for general monitoring (how much bandwidth is being used, number of
frames
etc). Ideally it would catch Ethernet errors as well. I'm looking for it
to
run on DOS or Windows 95/NT.

Any recommendations will be appreciated.

Mark
========================================
Mark Reimer, MCSE
PC Specialist
Information Services, Prairie Bible Institute
Phone: 403-443-5511 Ext: 3476
Fax: 403-443-5540
E-mail: mark.reimer@pbi.ab.ca
...
From vanepp@sfu.ca Wed Dec 15 17:35:38 1999
Date: Wed, 18 Aug 1999 09:58:43 -0700 (PDT)
From: Peter Van Epp <vanepp@sfu.ca>
To: unisog@sans.org
Subject: Re: Network (Ethernet) Monitors
X-Mailer: ELM [version 2.4 PL24]
I believe NeTraMet still supports a DOS version ...

ftp://ftp.auckland.ac.nz/pub/iawg/NeTraMet/

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada
...
From milindj@mastek.com Wed Dec 15 17:35:38 1999
Date: Wed, 18 Aug 1999 22:14:27 +0530
From: Milind A. Joshi <milindj@mastek.com>
To: unisog@sans.org, Mark Reimer <Mark.Reimer@pbi.ab.ca>
Subject: RE: Network (Ethernet) Monitors
X-Mailer: Internet Mail Service (5.0.1460.8)
[ Part 1, Text/PLAIN  32 lines. ]
    [ Unable to print this part. ]

Try an evaluation copy of statscout - www.statscout.com
There are may others...

Milind

----------
From:   Mark Reimer[SMTP:Mark.Reimer@pbi.ab.ca]
Sent:   August 18, 1999 8:11 PM
To:     unisog@sans.org
Subject:        Network (Ethernet) Monitors

Hi all,

I'm looking at software for monitoring my local network(s). I'm just
looking
for general monitoring (how much bandwidth is being used, number of
frames
etc). Ideally it would catch Ethernet errors as well. I'm looking for it
to
run on DOS or Windows 95/NT.

Any recommendations will be appreciated.

Mark
========================================
Mark Reimer, MCSE
PC Specialist
Information Services, Prairie Bible Institute
Phone: 403-443-5511 Ext: 3476
Fax: 403-443-5540
E-mail: mark.reimer@pbi.ab.ca
...
From stoermer@unt.edu Wed Dec 15 17:35:38 1999
Date: Wed, 18 Aug 1999 13:32:26 -0500
From: Chris Stoermer <stoermer@unt.edu>
To: unisog@sans.org
Subject: Re: Network (Ethernet) Monitors
X-Mailer: Pegasus Mail for Win32 (v3.11)
If you have manageable switches, you usually get software with 
them.  I am testing two CentreCOM 8126XL 100Mg switches which 
come with "onboard" management tools via telnet and web.  This 
particular model can break down switch traffic by each port.  You 
can also disable each port via the management tool.

Date sent:      	Wed, 18 Aug 1999 08:41:37 -0600
From:           	Mark Reimer <Mark.Reimer@pbi.ab.ca>
Subject:        	Network (Ethernet) Monitors
To:             	unisog@sans.org

Hi all,

I'm looking at software for monitoring my local network(s). I'm just looking
for general monitoring (how much bandwidth is being used, number of frames
etc). Ideally it would catch Ethernet errors as well. I'm looking for it to
run on DOS or Windows 95/NT.

Any recommendations will be appreciated.

Mark
========================================
Mark Reimer, MCSE
PC Specialist
Information Services, Prairie Bible Institute
Phone: 403-443-5511 Ext: 3476
Fax: 403-443-5540
E-mail: mark.reimer@pbi.ab.ca

Chris Stoermer
Computer Support Specialist III
College of Business Administration
University of North Texas
Email:  stoermer@unt.edu
Office:  940.369.8613
Fax:  940.565.4930
WEB:  http://www.coba.unt.edu
...
From houserd@odc.edu Wed Dec 15 17:35:38 1999
Date: Wed, 18 Aug 1999 16:11:38 -0400
From: "Houser, Dan" <houserd@odc.edu>
To: "'unisog@sans.org'" <unisog@sans.org>
Subject: RE: Network (Ethernet) Monitors 
X-Mailer: Internet Mail Service (5.5.2448.0)
[ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]
...
From: Doug Hughes [mailto:Doug.Hughes@Eng.Auburn.EDU]
 Subject: Re: Network (Ethernet) Monitors
If you have switches, host based monitoring of bandwidth is moot.
DOug
IMHO....

Not.  I am still constrained by the backbone bandwidth, regardless of the
front-end solution.

A common misconception held by networking professionals when they migrate
from hubs to switches is that you now have full bandwidth utilization.
Unfortunately, it only gives you full bandwidth to the backbone, which may
not buy you much...  (I had a client once who couldn't understand why their
10/100 switch wasn't providing better performance than their hub had been.
Of course, it was because the switch was plugged into a legacy 10MB
backplane, just like the old hub had been.  The maximum throughput was still
10MB shared.)

ddh
...
From Fred.Kiani@EP01.EGGINC.COM Wed Dec 15 17:35:38 1999
Date: Wed, 18 Aug 1999 14:29:30 -0400
From: "Kiani, Fred" <Fred.Kiani@EP01.EGGINC.COM>
To: 'Mark Reimer' <Mark.Reimer@pbi.ab.ca>, unisog@sans.org
Subject: RE: Network (Ethernet) Monitors
X-Mailer: Internet Mail Service (5.5.2448.0)
It really depends how much money you would be willing to spend.
I have not checked HP OpenView on DOS but it is working fine on NT.
Best regards,

Fred Kiani

	-----Original Message-----
	From:	Mark Reimer [SMTP:Mark.Reimer@pbi.ab.ca]
	Sent:	Wednesday, August 18, 1999 10:42 AM
	To:	unisog@sans.org
	Subject:	Network (Ethernet) Monitors

	Hi all,

	I'm looking at software for monitoring my local network(s). I'm just
looking
	for general monitoring (how much bandwidth is being used, number of
frames
	etc). Ideally it would catch Ethernet errors as well. I'm looking
for it to
	run on DOS or Windows 95/NT.

	Any recommendations will be appreciated.

	Mark
	========================================
	Mark Reimer, MCSE
	PC Specialist
	Information Services, Prairie Bible Institute
	Phone: 403-443-5511 Ext: 3476
	Fax: 403-443-5540
	E-mail: mark.reimer@pbi.ab.ca
...
From Doug.Hughes@Eng.Auburn.EDU Wed Dec 15 17:35:38 1999
Date: Wed, 18 Aug 1999 15:58:51 -0500 (CDT)
From: Doug Hughes <Doug.Hughes@Eng.Auburn.EDU>
To: unisog@sans.org
Subject: RE: Network (Ethernet) Monitors  
X-Mailer: TkMail 4.0beta9
...
...
From: Doug Hughes [mailto:Doug.Hughes@Eng.Auburn.EDU]
 Subject: Re: Network (Ethernet) Monitors
If you have switches, host based monitoring of bandwidth is moot.
DOug
IMHO....
Not.  I am still constrained by the backbone bandwidth, regardless of the
front-end solution.
A common misconception held by networking professionals when they migrate
from hubs to switches is that you now have full bandwidth utilization.
Unfortunately, it only gives you full bandwidth to the backbone, which may
not buy you much...  (I had a client once who couldn't understand why their
10/100 switch wasn't providing better performance than their hub had been.
Of course, it was because the switch was plugged into a legacy 10MB
backplane, just like the old hub had been.  The maximum throughput was still
10MB shared.)
I think you missed my point. If you have a switch installed, then any host
based monitoring will show you (max) the bandwidth to that 'one' machine. All
other bandwidth utilization is completely invisible. Of course, if all
traffic is to that one machine (unlikely in most cases, but possible
from your one example if you disregard any Internet traffic), then you
would see it all. I would regard this as highly unusual, unless that one
machine is a firewall or choke gateway of some sort. That was not indicated
in the original post, but also possible I suppose. I'm not sure that I would
want to turn my firewall into a network/bandwidth management platform as
well. (I'm pretty sure I wouldn't..)

In most common cases attempting to measure backbone bandwidth from a single
machine is apt to be... unproductive.. (based upon measuring using software
and a NIC in promiscuous mode on a single host as was inferred from the
original posting)

In all cases a smart switch will be able to tell you where your bandwidth
is being used. You just have to know how to collect the data (or use the
vendor provided software). RMON is a big plus here.
+----------------------------------------------------------------------+
   +---+  Brought to you by the undead Sinister mailing list  +---+
  To send to the list mail "sinister@missprint.org". To unsubscribe
   send "unsubscribe sinister" or "unsubscribe sinister-digest" to
  "majordomo@missprint.org".  WWW: http://www.missprint.org/sinister
 +-+  "legion of bedroom saddo devotees" "tech-heads and students" +-+
 +-+  "the cardie wearing biscuit nibbling belle & sebastian list" +-+
 +-+       "sinsietr is a bit freaky" - stuart david, looper        +-+
+----------------------------------------------------------------------+

Honey

tags

participants (1)