Q

Can you help me find good monitoring tools and protocol analyzers?

In this Q&A, enterprise security expert Michael Gregg suggests some good network monitoring tools and protocol analyzers and recommends what users should do before buying.

This Content Component encountered an error

I'm looking for monitoring tools plus protocol analyzers. I need to know which parameters should be taken into consideration, and then I will analyze the tool accordingly.

There are quite a few different monitoring tools available. My advice would be to start with a couple of open source tools before buying a commercial product. If you use Linux consider checking out Wireshark (Ethereal). This free network analyzer is one of the most well know and powerful. It can provide you with a wide range of details of network traffic. Another interesting tool to examine is Etherape. It is a great graphical network monitor.

One good way to get both of these tools up and running quickly is to download a copy of Backtrack. This is one of the newer bootable Linux distro's that literally places hundreds of security tools at your fingertips. Once loaded on a CD, you simply reboot the computer and have everything you need right at your fingertips. If you are looking for something you can run on a Windows system Ethereal will work there too. Another choice would be Packetyzer. It's based on Ethereal and has a great interface with lots of features.

One final word of advice would be to remember that when using these tools, you are limited in what you see on a switched network. You will need to span a port or perform mirror to see a true picture of what's going on. Cisco has an article on the topic, Configuring the Catalyst Switched Port Analyzer (SPAN) Feature, in case you need help with this.

This was first published in February 2007

Dig deeper on Network Security Monitoring and Analysis

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchSDN

SearchEnterpriseWAN

SearchUnifiedCommunications

SearchMobileComputing

SearchDataCenter

SearchITChannel

Close