[84753] in North American Network Operators' Group
Re: Tools classifying network traffic to applications
daemon@ATHENA.MIT.EDU (Christopher L. Morrow)
Thu Sep 22 11:52:35 2005
Date: Thu, 22 Sep 2005 15:51:38 +0000 (GMT)
From: "Christopher L. Morrow" <christopher.morrow@mci.com>
In-reply-to: <4332CF52.5020101@he.iki.fi>
To: Petri Helenius <pete@he.iki.fi>
Cc: NANGO <nanog@merit.edu>
Errors-To: owner-nanog@merit.edu
On Thu, 22 Sep 2005, Petri Helenius wrote:
>
> Christopher L. Morrow wrote:
>
> >>which can't really tell bittorrent (or ssh or aim or...) over tcp/80 from
> >>http over tcp/80... I think Joe's looking for something that knows what
> >>protocols look like below the port number and can spit out numbers for
> >>that... these, it would seem to me, would all require in-line traffic
> >>capture or mirrored port (mirrored traffic, not necessarily an ethernet
> >>port mirror) to be effective.
> >>
> >>
> >>
> We can do that up to 2Gbps; http://www.rommon.com/ , BitTorrent, KaZaa,
> eDonkey, HTTP, etc. supported.
>
> Pete
>
