IPAudit is a handy tool that will allow you to analyze all packets entering and leaving your network. It listens to a network device in promiscuous mode, just as an IDS sensor would, and provides details on hosts, ports, and protocols. It can be used to monitor bandwidth, connection pairs, detect compromises, discover botnets, and see whos scanning your network. When compared to similar tools, such as Cisco System's Netflow it has many advantages (see the SecurityFocus articles on Netflow, part 1 and part 2). It is easier to setup than Netflow, and if you install it on your existing IDS sensors, there is no extra hardware to purchase. Since it captures traffic from a span port, it does not require that you modify the configuration of your networking equipment, or poke holes in firewalls for Netflow data.
I was not able to get real data on the graphs, i can see the rest of things,but i cant see the graphs, it still shows the default sample page.
what could be wrong and how to correct that. Earlier i was not able to do even the reports which issued an error, when i changed perl scripts to executables, now every thing is almost working except for the graph.
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/infocus/1842/384#384