Diferencia entre revisiones de «Análisis de tráfico»
De gacq wiki
(→Analisis de trafico) |
|||
(No se muestran 25 ediciones intermedias de 2 usuarios) | |||
Línea 1: | Línea 1: | ||
+ | =Herramientas= | ||
+ | *[[Flowscan]] | ||
+ | |||
+ | |||
=Analisis de trafico= | =Analisis de trafico= | ||
− | == | + | Guias |
− | + | *http://www.gulag.org.mx/doc_netflow.php | |
− | *http://www. | + | *http://www.dynamicnetworks.us/netflow/ |
+ | |||
+ | ==ntop== | ||
+ | ntop --set-admin-password | ||
+ | *http://www.ntop.org | ||
+ | http://localhost:3000/ | ||
+ | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
==flow-tools vs cflowd== | ==flow-tools vs cflowd== | ||
Línea 16: | Línea 20: | ||
*flow-tools is easier to build because it is written in portable C. Problems with building cflowd may occur because it requires cutting edge C++ features | *flow-tools is easier to build because it is written in portable C. Problems with building cflowd may occur because it requires cutting edge C++ features | ||
*flow-tools is actively maintained, and supports newer NetFlow versions, including those from the popular Cisco Cat6K series platforms | *flow-tools is actively maintained, and supports newer NetFlow versions, including those from the popular Cisco Cat6K series platforms | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
Revisión actual del 11:57 24 ago 2006
Herramientas
Analisis de trafico
Guias
ntop
ntop --set-admin-password
flow-tools vs cflowd
Why use flow-tools instead of cflowd?
- flow-capture preserves the sub-second portion of the NetFlow timestamps that cflowd discards
- flow-tools is easier to build because it is written in portable C. Problems with building cflowd may occur because it requires cutting edge C++ features
- flow-tools is actively maintained, and supports newer NetFlow versions, including those from the popular Cisco Cat6K series platforms