port specific traffic analyser

[kcpant]

Hi friends,

can anybody tell me any utility which can be used to check network I/O on a specific port of TCP? I use MRTS to know day-wise overall I/O (in MB)through my external interface, but I want to know how much traffic has been passed on a specific port.I know we can use ethreal for this purpose, but I have to continuosly monitor the traffic and then apply a filter to find out traffic through a specific port, which all process is time and resource consuming.I need a tool which can extract that data from SNMP data provided by my extrnal NIC, and I can see the reports on html or text files periodically, as I do with MRTG & MRTS.

PS: sorry for that I've started this thread before in linux general forum.

thanks & regards

[Steven E. Protter]

tcpdump can do this:

tcpdump -i eth0 | grep 80 > file

That will filter port 80 into a file for you.

Now this gui tool will do the job for you as well.

ethereal

Its built into many distributions. The menus can be used to filter the file after the data is collected.

I do this from time to time on my Linux and HP-9000 servers.

Its the classic admin situation. You have to MAKE the right tool for the job.

SEP

[Florian Heigl (new acc)]

kcpant - I hope You noticed my replies 'over there' :)