topic Re: port specific traffic analyser in Operating System - Linux

port specific traffic analyser

kcpant — Mon, 21 Feb 2005 05:35:23 GMT

Hi friends,

can anybody tell me any utility which can be used to check network I/O on a specific port of TCP? I use MRTS to know day-wise overall I/O (in MB)through my external interface, but I want to know how much traffic has been passed on a specific port.I know we can use ethreal for this purpose, but I have to continuosly monitor the traffic and then apply a filter to find out traffic through a specific port, which all process is time and resource consuming.I need a tool which can extract that data from SNMP data provided by my extrnal NIC, and I can see the reports on html or text files periodically, as I do with MRTG & MRTS.

PS: sorry for that I've started this thread before in linux general forum.

thanks & regards

Re: port specific traffic analyser

Steven E. Protter — Mon, 21 Feb 2005 05:42:24 GMT

tcpdump can do this:

tcpdump -i eth0 | grep 80 > file

That will filter port 80 into a file for you.

Now this gui tool will do the job for you as well.

ethereal

Its built into many distributions. The menus can be used to filter the file after the data is collected.

I do this from time to time on my Linux and HP-9000 servers.

Its the classic admin situation. You have to MAKE the right tool for the job.

SEP

Re: port specific traffic analyser

Florian Heigl (new acc) — Mon, 21 Feb 2005 06:17:23 GMT

kcpant - I hope You noticed my replies 'over there' :)