Sinister: test4

Honey honey at xxx.org
Fri Jan 7 21:11:03 GMT 2000


>From rjonkman at ittc.ukans.edu Wed Dec 15 17:35:38 1999
Date: Wed, 18 Aug 1999 11:02:47 -0500
From: Roelof JT Jonkman <rjonkman at xxx.edu>
To: unisog at sans.org
Cc: Mark Reimer <Mark.Reimer at pbi.ab.ca>
Subject: Re: Network (Ethernet) Monitors 
X-Mailer: exmh version 2.0.3 3/22/99

Mark,

Etherpeek seems ok for that, we use it on and off.
http://www.aggroup.com
mrtg is sort of a neat tool too.
http://ee-staff.ethz.ch/~oetiker/webtools/mrtg/mrtg.html 

roel
Systems & Network hacker
ITTC/University of Kansas

>From RGolshan at Central.UH.EDU Wed Dec 15 17:35:38 1999
Date: Wed, 18 Aug 1999 11:01:31 -0500
From: "Golshan, Reza" <RGolshan at xxx.EDU>
To: 'Mark Reimer ' <Mark.Reimer at pbi.ab.ca>,
     "'unisog at sans.org '" <unisog at sans.org>
Cc: "'reza at uh.edu'" <reza at uh.edu>
Subject: RE: Network (Ethernet) Monitors
X-Mailer: Internet Mail Service (5.5.2448.0)

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Take a look at;
http://www.telecomm.uh.edu/statistics.html
which uses;
http://ee-staff.ethz.ch/~oetiker/webtools/mrtg/mrtg.html

Reza 
 

-----Original Message-----
From: Mark Reimer
To: unisog at sans.org
Sent: 8/18/99 9:41 AM
Subject: Network (Ethernet) Monitors

Hi all,

I'm looking at software for monitoring my local network(s). I'm just
looking
for general monitoring (how much bandwidth is being used, number of
frames
etc). Ideally it would catch Ethernet errors as well. I'm looking for it
to
run on DOS or Windows 95/NT.

Any recommendations will be appreciated.

Mark
========================================
Mark Reimer, MCSE
PC Specialist
Information Services, Prairie Bible Institute
Phone: 403-443-5511 Ext: 3476
Fax: 403-443-5540
E-mail: mark.reimer at pbi.ab.ca

>From vanepp at sfu.ca Wed Dec 15 17:35:38 1999
Date: Wed, 18 Aug 1999 09:58:43 -0700 (PDT)
From: Peter Van Epp <vanepp at xxx.ca>
To: unisog at sans.org
Subject: Re: Network (Ethernet) Monitors
X-Mailer: ELM [version 2.4 PL24]

	I believe NeTraMet still supports a DOS version ...

ftp://ftp.auckland.ac.nz/pub/iawg/NeTraMet/

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada

>From milindj at mastek.com Wed Dec 15 17:35:38 1999
Date: Wed, 18 Aug 1999 22:14:27 +0530
From: Milind A. Joshi <milindj at xxx.com>
To: unisog at sans.org, Mark Reimer <Mark.Reimer at pbi.ab.ca>
Subject: RE: Network (Ethernet) Monitors
X-Mailer: Internet Mail Service (5.0.1460.8)


    [ Part 1, Text/PLAIN  32 lines. ]
    [ Unable to print this part. ]


Try an evaluation copy of statscout - www.statscout.com
There are may others...

Milind


----------
From:   Mark Reimer[SMTP:Mark.Reimer at xxx.ca]
Sent:   August 18, 1999 8:11 PM
To:     unisog at sans.org
Subject:        Network (Ethernet) Monitors

Hi all,

I'm looking at software for monitoring my local network(s). I'm just
looking
for general monitoring (how much bandwidth is being used, number of
frames
etc). Ideally it would catch Ethernet errors as well. I'm looking for it
to
run on DOS or Windows 95/NT.

Any recommendations will be appreciated.

Mark
========================================
Mark Reimer, MCSE
PC Specialist
Information Services, Prairie Bible Institute
Phone: 403-443-5511 Ext: 3476
Fax: 403-443-5540
E-mail: mark.reimer at pbi.ab.ca



>From stoermer at unt.edu Wed Dec 15 17:35:38 1999
Date: Wed, 18 Aug 1999 13:32:26 -0500
From: Chris Stoermer <stoermer at xxx.edu>
To: unisog at sans.org
Subject: Re: Network (Ethernet) Monitors
X-Mailer: Pegasus Mail for Win32 (v3.11)

If you have manageable switches, you usually get software with 
them.  I am testing two CentreCOM 8126XL 100Mg switches which 
come with "onboard" management tools via telnet and web.  This 
particular model can break down switch traffic by each port.  You 
can also disable each port via the management tool.


Date sent:      	Wed, 18 Aug 1999 08:41:37 -0600
From:           	Mark Reimer <Mark.Reimer at xxx.ca>
Subject:        	Network (Ethernet) Monitors
To:             	unisog at sans.org

Hi all,

I'm looking at software for monitoring my local network(s). I'm just looking
for general monitoring (how much bandwidth is being used, number of frames
etc). Ideally it would catch Ethernet errors as well. I'm looking for it to
run on DOS or Windows 95/NT.

Any recommendations will be appreciated.

Mark
========================================
Mark Reimer, MCSE
PC Specialist
Information Services, Prairie Bible Institute
Phone: 403-443-5511 Ext: 3476
Fax: 403-443-5540
E-mail: mark.reimer at pbi.ab.ca

Chris Stoermer
Computer Support Specialist III
College of Business Administration
University of North Texas
Email:  stoermer at unt.edu
Office:  940.369.8613
Fax:  940.565.4930
WEB:  http://www.coba.unt.edu

>From houserd at odc.edu Wed Dec 15 17:35:38 1999
Date: Wed, 18 Aug 1999 16:11:38 -0400
From: "Houser, Dan" <houserd at xxx.edu>
To: "'unisog at sans.org'" <unisog at sans.org>
Subject: RE: Network (Ethernet) Monitors 
X-Mailer: Internet Mail Service (5.5.2448.0)

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

>  From: Doug Hughes [mailto:Doug.Hughes at xxx.EDU]
>  Subject: Re: Network (Ethernet) Monitors 
>
> If you have switches, host based monitoring of bandwidth is moot.
> 
> DOug

IMHO....

Not.  I am still constrained by the backbone bandwidth, regardless of the
front-end solution.

A common misconception held by networking professionals when they migrate
from hubs to switches is that you now have full bandwidth utilization.
Unfortunately, it only gives you full bandwidth to the backbone, which may
not buy you much...  (I had a client once who couldn't understand why their
10/100 switch wasn't providing better performance than their hub had been.
Of course, it was because the switch was plugged into a legacy 10MB
backplane, just like the old hub had been.  The maximum throughput was still
10MB shared.)

ddh

>From Fred.Kiani at EP01.EGGINC.COM Wed Dec 15 17:35:38 1999
Date: Wed, 18 Aug 1999 14:29:30 -0400
From: "Kiani, Fred" <Fred.Kiani at xxx.COM>
To: 'Mark Reimer' <Mark.Reimer at pbi.ab.ca>, unisog at sans.org
Subject: RE: Network (Ethernet) Monitors
X-Mailer: Internet Mail Service (5.5.2448.0)

It really depends how much money you would be willing to spend.
I have not checked HP OpenView on DOS but it is working fine on NT.
Best regards,

Fred Kiani


	-----Original Message-----
	From:	Mark Reimer [SMTP:Mark.Reimer at xxx.ca]
	Sent:	Wednesday, August 18, 1999 10:42 AM
	To:	unisog at sans.org
	Subject:	Network (Ethernet) Monitors

	Hi all,

	I'm looking at software for monitoring my local network(s). I'm just
looking
	for general monitoring (how much bandwidth is being used, number of
frames
	etc). Ideally it would catch Ethernet errors as well. I'm looking
for it to
	run on DOS or Windows 95/NT.

	Any recommendations will be appreciated.

	Mark
	========================================
	Mark Reimer, MCSE
	PC Specialist
	Information Services, Prairie Bible Institute
	Phone: 403-443-5511 Ext: 3476
	Fax: 403-443-5540
	E-mail: mark.reimer at pbi.ab.ca

>From Doug.Hughes at Eng.Auburn.EDU Wed Dec 15 17:35:38 1999
Date: Wed, 18 Aug 1999 15:58:51 -0500 (CDT)
From: Doug Hughes <Doug.Hughes at xxx.EDU>
To: unisog at sans.org
Subject: RE: Network (Ethernet) Monitors  
X-Mailer: TkMail 4.0beta9


>
>>  From: Doug Hughes [mailto:Doug.Hughes at xxx.EDU]
>>  Subject: Re: Network (Ethernet) Monitors 
>>
>> If you have switches, host based monitoring of bandwidth is moot.
>> 
>> DOug
>
>IMHO....
>
>Not.  I am still constrained by the backbone bandwidth, regardless of the
>front-end solution.
>
>A common misconception held by networking professionals when they migrate
>from hubs to switches is that you now have full bandwidth utilization.
>Unfortunately, it only gives you full bandwidth to the backbone, which may
>not buy you much...  (I had a client once who couldn't understand why their
>10/100 switch wasn't providing better performance than their hub had been.
>Of course, it was because the switch was plugged into a legacy 10MB
>backplane, just like the old hub had been.  The maximum throughput was still
>10MB shared.)
>

I think you missed my point. If you have a switch installed, then any host
based monitoring will show you (max) the bandwidth to that 'one' machine. All
other bandwidth utilization is completely invisible. Of course, if all
traffic is to that one machine (unlikely in most cases, but possible
from your one example if you disregard any Internet traffic), then you
would see it all. I would regard this as highly unusual, unless that one
machine is a firewall or choke gateway of some sort. That was not indicated
in the original post, but also possible I suppose. I'm not sure that I would
want to turn my firewall into a network/bandwidth management platform as
well. (I'm pretty sure I wouldn't..)

In most common cases attempting to measure backbone bandwidth from a single
machine is apt to be... unproductive.. (based upon measuring using software
and a NIC in promiscuous mode on a single host as was inferred from the
original posting)

In all cases a smart switch will be able to tell you where your bandwidth
is being used. You just have to know how to collect the data (or use the
vendor provided software). RMON is a big plus here.
+----------------------------------------------------------------------+
   +---+  Brought to you by the undead Sinister mailing list  +---+
  To send to the list mail "sinister at missprint.org". To unsubscribe
   send "unsubscribe sinister" or "unsubscribe sinister-digest" to
  "majordomo at missprint.org".  WWW: http://www.missprint.org/sinister
 +-+  "legion of bedroom saddo devotees" "tech-heads and students" +-+
 +-+  "the cardie wearing biscuit nibbling belle & sebastian list" +-+
 +-+       "sinsietr is a bit freaky" - stuart david, looper        +-+
+----------------------------------------------------------------------+



More information about the Sinister mailing list