Ethereal-users: Re: [Ethereal-users] Creating reports and graphs from ethereal captures

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 19 Apr 2001 12:20:01 -0700 (PDT)
> I have a FreeBSD 4.2 box with ethereal on it.  I want to use it to
> monitor the traffic on our network that has about 1000 nodes that are
> Win95, 98, NT4.0 and 2000 boxes.  I would like to create reports and
> graphs from the captures so I can create a network baseline.  I also
> want to show my manager the percentage of HTTP traffic we have on our
> network and things similar to that.  Are there any additional tools I
> can use with ethereal to do this?

Given that Ethereal saves its captures in tcpdump format, any tool that
can read tcpdump captures and produce information such as that will also
work with Ethereal.

I have the impression that that ntop:

	http://www.us.ntop.org/ntop.html

(the US mirror; the main site is in Italy, and other mirrors exist in
France, Japan, and Australia) can be used to produce traffic statistics
of that sort.

Ntop runs on top of libpcap, so it doesn't use Ethereal or tcpdump - it
does the capturing itself.