North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Tools classifying network traffic to applications

  • From: Joe Shen
  • Date: Thu Sep 22 23:53:00 2005
  • Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.sg; h=Message-ID:Received:Date:From:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=JWYL5VOsB4ImmoqdF+wPz569ohgqUiZczth4e4yN3oSyGpz4r4SumFG3JRFdGypDwlCZM31yjxj9maLWEbedG3zMqOHZxyY3HcFFMzptayMG1m5BtH5dty24rF2tkEOzgUVgw4l8BFi9Kx5ftnGcjyqigE3kKpMU1219m01ddfs= ;
hi,

> 
> Christopher L. Morrow wrote:
> 
> >>which can't really tell bittorrent (or ssh or aim
> or...) over tcp/80 from
> >>http over tcp/80... I think Joe's looking for
> something that knows what
> >>protocols look like below the port number and can
> spit out numbers for
> >>that... these, it would seem to me, would all
> require in-line traffic
> >>capture or mirrored port (mirrored traffic, not
> necessarily an ethernet
> >>port mirror) to be effective.
> >>

Yes, that's what I want-- Find out what application
use what protocol and what number, then apply that
result to netflow analysis system which could be used
to get statistics of multiple sites.

> >>    
> >>
> We can do that up to 2Gbps; http://www.rommon.com/ 
> , BitTorrent, KaZaa, 
> eDonkey, HTTP, etc. supported.
> 


It seems to focus on P2P application. Is there tool to
support applications as more as possible( include p2p,
voip, web, ftp, network game, etc. ) 

regards

Joe

Send instant messages to your online friends http://asia.messenger.yahoo.com