Great Circle Associates Firewalls
(September 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Building a monitoring system
From: Russ <Russ . Cooper @ RC . Toronto . on . ca>
Date: Fri, 6 Sep 1996 09:00:45 -0400
To: "'Firewalls'" <Firewalls @ GreatCircle . com>

Howdy folks,

I'm going to take the plunge into Unix by way of building a monitoring
system that would be dedicated to the task of reporting the actions of
the other machines on my very small network. Given my limited Unix
background, I figured the best way to approach this would be to ask
y'all what this box should be.

I've got a 486DX-100 sitting here with 8MB of RAM and a el cheapo PCI
NE2000 clone NIC. I've got 1GB of drive and an ATI VGA Wonder VGA
adapter. A floppy, a Future Domain TMC3260 PCI SCSI-2 adapter, and a NEC
3x SCSI CD round out the box.

So;

- what OS should I use (downloadable from the net would be preferred)
- will the OS support the hardware I described or do I need
more/different/better hardware
- what packet monitor tool would be recommended, I would like something
that I can set filters on and run several filters at once into different
captures if possible
- could somebody lend me a bookmark file of Unix tools links for the
recommended OS
- configuration recommendations would be appreciated

I've got similar functionality in my NT boxes, so its not that I can't
do this in NT. I want to put a dedicated box in place for this now so I
figured I'd give Unix a try at this before I put NT on it. If it works
well, I'll just leave it there, maybe allowing me to give you more
detailed dumps of NT activity that you can actually grep...;-]

A lot of people have been very helpful to me over time, and I have
really appreciated that help, so I ask you to respond to me in private
email once again and make your suggestions. I promise to summarize the
system once its put together and post it to the list.

Cheers,
Russ

Cheers,
Russ


Follow-Ups:
Indexed By Date Previous: traceroute
From: "James Rippas (Technology)" <jrippas @ fcmc . com>
Next: Re: authenticated/encrypted sessions
From: Jim Wamsley 303-673-8163 <jim @ coltano . stortek . com>
Indexed By Thread Previous: Re: traceroute
From: Geoff Mulligan <geoff @ mulligan . com>
Next: Re: Building a monitoring system
From: Todd Graham Lewis <tlewis @ mindspring . com>

Google
 
Search Internet Search www.greatcircle.com