Traffic monitor

It depends on what traffic you want to monitor.
For a bespoke and non-realtime solution, an IPS/IDS may be the way to go. Try hunter-nsm, which uses BRO/SNORT, with ELK.

There are many other competing platforms - suricata or so,

And for a real-time monitoring, you may want to rely on packaes like pftop,dnstop, etc.
 
I basically wanted something which would report usage between two dates... not really bothered about realtime usage.
 
Back
Top