monitor network usage of a host?

[kevin]

Spyou wrote:
> At 02:56 09/01/2004, Joel Lopez wrote:
> 
>> is it possible to find out if a machine is uploading copies of DVD's 
>> to the net or if a machine is affected with the slammer virus and 
>> generating massive amouts of network traffic?
>>
>> Basically can I be alerted if a machine is using more than normal 
>> bandwith?
> 
> 
> You've got to define what is "normal" and what is "anormal"
> 
> Then, a simple check_snmp will be enough to get the network trafic 
> graphed (eg. with RRD)
> 
> Finaly, you'll have to monitor this graph (eg "what is the last 10 
> minuts max network load on this graph") and send outs alerts if treshold 
> matches
> 
> 
> ____________________________________
>  'Spyou' - www.spyou.org - root at spyou.org
>     #gtr / ircnet.kaptech.fr - UIN : 6871374
> 
> Please, tell me who i am !
> - Supertramps
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: Perforce Software.
> Perforce is the Fast Software Configuration Management System offering
> advanced branching capabilities and atomic changes on 50+ platforms.
> Free Eval! http://www.perforce.com/perforce/loadprog.html
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when 
> reporting any issue. ::: Messages without supporting info will risk 
> being sent to /dev/null
You might want to take a look at this package.
http://nagios.sourceforge.net/download/contrib/misc/check_traffic
It is located in the downloads section of the Nagios web site.  Go to 
"Get extra stuff" and it is the bottom of that.  It works well if you 
are monitoring computers that have an SNMP package on them.  Otherwise 
you could take the ideas in there and monitor each port on your switch 
if it has SNMP.
Kevin



-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null