[clue-tech] The Rogue Uploader

[David L. Willson]

My pipe runneth over...

I have a constant upload rate of 200Kb, which surges to 1.6Mb for long enough to make my
users cranky.  Sometimes, I even have to power-cycle the router to calm things down. 
Bleah...

As I understand it, I can put a hub with three lines in place of the line from my
network to the router, and I can run the 3rd line to my Linux laptop in promiscuous
mode, and then I will be able to audit all the Internet traffic to and from my network
from my laptop.

That, and the word "wireshark", are the limit of my understanding.

What I want to do is produce a report something like this:

Time start: 2007-01-31 12:24am
Time stop:  2007-01-31 11.26am

bits-sent-to        bits-sent-from         IP Address
------------        --------------         ----------
1234567             123456                 65.125.246.3
7654321             654321                 65.125.246.7
345253              99472                  65.125.246.10

So, which of you geeks is going to win lunch for two at the restaurant of your choice by
telling me the rest of what I need to know?  My money's on Dave Anselmi, but you never
do know, do ya?

David L. Willson
Trainer/Engineer/Consultant
MCT, MCSE, Linux+
(720) 333-LANS