trafflogger 0.8.1 review

trafflogger is a conf-based traffic logger

License: GPL (GNU General Public License) File size: 11K Developer: Luciano Ruete

0

trafflogger is a conf-based traffic logger. All the logged data can be displayed (graphed) via a web interface. Users can use it to get a global view of network load or to get a closer look at any of the hosts.

This is a conf based traffic logger, each conf log in/out traffic for:

some definable hosts
in a definable device
which match a (optional) definable pcap filter

All the logged data can be displayed (actually graphed) via a web cgi.
So you can get golbal view of your network load and either get a closer look for any of the hosts(very usefull if you are a [mini|wanabe]ISP). Keep in mind that you can make multiples confs for the same host/s, changing only de pcap rule, doing this you are taking photos of your network from multiples angles. You can make a conf to log web traffic, otherone to log mail traffic, and otherone to log kazaa traffic, and finally one to log all traffic. You can also use pcap filter to discrime unwanted traffic for a specific conf.

Here are some key features of "trafflogger":
Coded in Perl
rrdtool powered
libpcap powered
log ip traffic
traffic grapher/analyzer
web output
dynamic ip support