From owner-freebsd-questions Mon Apr 15 20:03:54 1996 Return-Path: owner-questions Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id UAA01071 for questions-outgoing; Mon, 15 Apr 1996 20:03:54 -0700 (PDT) Received: from vpm.com (vpm.com [205.162.123.143]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id UAA01066 for ; Mon, 15 Apr 1996 20:03:52 -0700 (PDT) Received: (from root@localhost) by vpm.com (8.6.12/8.6.12) id UAA02499 for questions@freebsd.org; Mon, 15 Apr 1996 20:05:23 -0700 From: Mark Stout Message-Id: <199604160305.UAA02499@vpm.com> Subject: Re: Monitoring traffic between two sites, How?? To: questions@freebsd.org Date: Mon, 15 Apr 1996 20:05:22 -0700 (PDT) In-Reply-To: from "Anthony Hill" at Apr 16, 96 09:14:12 am X-Mailer: ELM [version 2.4 PL24 ME8a] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-questions@freebsd.org X-Loop: FreeBSD.org Precedence: bulk "Anthony Hill was seen writing" > On Mon, 15 Apr 1996, Christian wrote: > > > Hi, > > > > I was wondering if there is anyway to use FreeBSD to monitor > > traffic between two sites. I wan to be able to see how many users > > from certain ip addresses on our network are connected to another ip > > address. If possible I would also like to know, the duration of each > > session, and what port the users are connected to on the other end. > > Is this possible using FreeBSD and/or some freely available tools? > > Well you could get the raw data with tcpdump (which is part of the > distribution), although it would be a bit cryptic. Perhaps someone knows > of something that would process the output of tcpdump into something a > bit more readable. I tried using tcpdump, but can't configure the device /dev/bpf0. What do I need to do to configure this device? Thanks, Mark -- ========================================================================== Mark Stout | The Village Potpourri Mall: http://www.vpm.com/ ---------------+---------------------------------------------------------- VPM Enterprises; P.O.Box 6427; Folsom, CA 95763-6427 Secured Web Hosting and Secured Discussion Groups Secured Internet Sales, Marketing and Advertising Specialist ==========================================================================