[Bro] Using BRO for measuring TCP flow bandwidth

[Harkeerat Bedi]

Thank you for your prompt assistance Justin. I will look into this.

Regards,
Harkeerat Bedi


On Thu, Aug 12, 2010 at 8:13 AM, Justin Azoff <JAzoff at uamail.albany.edu>wrote:

> On Wed, Aug 11, 2010 at 11:18:36PM -0400, Harkeerat Bedi wrote:
> > Part of my project now requires to also capture the network bandwidth
> > being utilized by a flow that passes thorough the BRO monitored
> > interface. By flow we mean, a source-destination IP pair.
>
> capstats(included with bro) can do this:
>
>    capstats -I 5 -i eth0 -f 'host a.b.c.d and host e.f.g.h'
>
> --
> -- Justin Azoff
> -- Network Security & Performance Analyst
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20100812/7a934f75/attachment.html