We have around 300 machines. How can we monitor the network using an Ubuntu machine so that we can find out which node is broadcasting, traffic monitoring, also trying ntop.
Asked
Active
Viewed 947 times
5 Answers
1
karthick87 has the answer, but just to amplify it your monitoring has to be distributed amongst the 300 end-stations and cannot be simply centralized to one point.
The biggest reason this is necessary is that you are probably using a switched (not shared) network hub so no single point is capable of seeing all the traffic on the net. SNMP is certainly old-school, partly because it works.
0
My personal tool of choice is wireshark. It has a nice gui, flexible filters, and a some analysing tools.
sudo apt-get install wireshark
