- Joined
- Sep 14, 2004
- Messages
- 14,379
Ok, so look at this picture.
Basically we have been generating netstat -an traffic on every linux host/guest/etc we have inside of our network, collecting it at a central location, then through some ridiculous scripting/generating views and sorting them based on application/network/etc. This will eventually allow us to get to a bigger project of getting rid of unneeded vm guests, securing certain servers, making sure prod/qa/dev environments are separated. We can look at these graphs now and ask, "why is this dev box talking to this production box" etc. Or i can say, why is this box using Java to talking to postgresql on this server that has supposedly been decommissioned from production for 6 months. It works, but it is very manual intensive and ugly.
We are looking for a very high level look at traffic from any server we want. Has anyone undertaken a similar project and have any advice on software suites(preferably OSS), or other to do help assist in this?
Please let me know if this makes sense.
Basically we have been generating netstat -an traffic on every linux host/guest/etc we have inside of our network, collecting it at a central location, then through some ridiculous scripting/generating views and sorting them based on application/network/etc. This will eventually allow us to get to a bigger project of getting rid of unneeded vm guests, securing certain servers, making sure prod/qa/dev environments are separated. We can look at these graphs now and ask, "why is this dev box talking to this production box" etc. Or i can say, why is this box using Java to talking to postgresql on this server that has supposedly been decommissioned from production for 6 months. It works, but it is very manual intensive and ugly.
We are looking for a very high level look at traffic from any server we want. Has anyone undertaken a similar project and have any advice on software suites(preferably OSS), or other to do help assist in this?
Please let me know if this makes sense.