We have around 300 machines. How can we monitor the network using an Ubuntu machine so that we can find out which node is broadcasting, traffic monitoring, also trying ntop.
Asked
Active
Viewed 942 times
5 Answers
5
Check out this guide

Zanna
- 70,465

karthick87
- 81,947
-
+1 good recommendations and package links. In general, it is better to say "Check out how-to-monitor-your-servers-with-snmp-and-cacti at debuntu.org" rather than "this link" as it is more descriptive and doesn't break if debuntu.org goes off the net. – msw Dec 24 '10 at 15:53
1
karthick87 has the answer, but just to amplify it your monitoring has to be distributed amongst the 300 end-stations and cannot be simply centralized to one point.
The biggest reason this is necessary is that you are probably using a switched (not shared) network hub so no single point is capable of seeing all the traffic on the net. SNMP is certainly old-school, partly because it works.
0
My personal tool of choice is wireshark. It has a nice gui, flexible filters, and a some analysing tools.
sudo apt-get install wireshark