[Dshield] Network monitoring tools on servers

Stef stefmit at gmail.com
Fri Jun 3 18:55:16 GMT 2005


I was never able to understand the benefit of Microsoft's NetMon -
which is why I would rather recommend:

winpcap/(t)ethereal (by all known), in conjunction with rpcapd
installed on the server(s)
(http://www.winpcap.org/docs/docs31beta4/html/group__remote.html), the
latter accepting some basic security, also.

HTH,
Stef

On 6/3/05, Ed Truitt <ed.truitt at etee2k.net> wrote:
> There is a debate going on where I work -- a rather largish enterprise,
> with global operations.  Our server support folks want to install NetMon
> (Microsoft's network monitor) on all the servers




More information about the list mailing list