[H-GEN] IP Traffic Monitoring

[Bruce Campbell]

[ Humbug *General* list - semi-serious discussions about Humbug and     ]
[ Unix-related topics. Posts from non-subscribed addresses will vanish. ]

On Wed, 10 Sep 2003, Tony Nugent wrote:

> On Wed Sep 10 2003 at 09:34, Russell Stuart wrote:
>
> > The General Interface Statistics screen of iptraf says that approx 50%
>
> (iptraf?  you really trust what iptraf says?  It may be prudent to
> confirm its conclusions before going off on a wild goose-chase :)

Last week I attended a talk where this chap was wanting to diagnose BGP
messages coming in.  So rather than trusting the output of just one tool
(ethereal), he double-checked his work with tcpdump, zebra and a few other
things that grok BGP.  Which all gave different results under varying
conditions.

To save your eyes from glazing over, the end result was that he'd had to
find and fix bugs in all programs that he used so that all gave the same
output.  I'm not sure what his original research was after that, but it
was fascinating to see the steps so that he could confirm one tool's
conclusions.

--==--
Bruce.

Almost as good as the company that had a location which 'ate' routers
(memory parity errors) on a regular basis, which turned out to be a nearby
army base doing a fortnightly high-power test on their radar systems.


--
* This is list (humbug) general handled by majordomo at lists.humbug.org.au .
* Postings to this list are only accepted from subscribed addresses of
* lists 'general' or 'general-post'.  See http://www.humbug.org.au/