North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Tools classifying network traffic to applications

  • From: Petri Helenius
  • Date: Thu Sep 22 11:37:18 2005 
Christopher L. Morrow wrote:
which can't really tell bittorrent (or ssh or aim or...) over tcp/80 from
http over tcp/80... I think Joe's looking for something that knows what
protocols look like below the port number and can spit out numbers for
that... these, it would seem to me, would all require in-line traffic
capture or mirrored port (mirrored traffic, not necessarily an ethernet
port mirror) to be effective.


We can do that up to 2Gbps; http://www.rommon.com/ , BitTorrent, KaZaa, eDonkey, HTTP, etc. supported.

Pete