Re: [Sguil-users] Using Sguil to make filtering rules

[Richard B. <tao...@gm...>]

On Mon, Jan 19, 2009 at 11:42 AM, Tom Buelens <tom...@gm...> wrote:
> Hi,
>
>
> My Sguil sensor and server are almost ready to connect to a spanning
> port situated between a client and a server VLAN.
>
> The goal of the exercise is to chart the traffic flows and then
> distill network filtering rules from this knowledge.
>

Hi Tom,

If you're just trying to watch traffic flows, you might consider using
Argus (qosient.com/argus) as a stand-alone application.

Sincerely,

Richard