On Wed, 26 Oct 2005, Steven M. Bellovin wrote:
> >> Is there any package that will construct a traffic matrix?  Ntop is
> >> telling me that there is traffic to strange and wondrous places, but I
> >> don't know which hosts are talking to them, or over what ports.  (Maybe
> >> ntop can do this, but if so I haven't figured out how to make it
> >> display it.)

Is that ntop-1.x, or newer?

> Or Ethereal.  But I'm looking for something that produces databases that 
> I can query later.

I believe that current versions of ntop can output netflow data and/or
store it in a database.  However, it's spyware (phones home and reports
what version you are running, unless you take care to configure it not
to do so).

--apb (Alan Barrett)