My first port of call tends to be tcpdump, with various filters and greps to pick out what I want. Usually I'm looking at RTP streams [0], so I run it through some perl to decode [1]
For wider monitoring, at key points on the network I use ntop [2] to see what's
If I want a quick overview of a given machine I load up iftop [3], which isn't very thrilling on my desktop at the moment
[0] https://i.imgur.com/O9ekuPt.png
[1] https://i.imgur.com/x9l0UNd.png
[2] https://i.imgur.com/gFXAxwa.png
[3] https://i.imgur.com/vmpgR6i.png
All of these are trivial to install (except for the RTP perl script which I have as a custom apt-gettable package) and don't require non-standard interpreters and package managers.
Nethertheless I went to get this. I had to install 540MB of support files just to run "go get github.com/gcla/termshark/cmd/termshark". Still it compliles. Then I run it, and it shows bugger all, I suspect I need to find and install more libraries (tcell, gowid), which themselves require massive downloads.
It's simply not worth it, it's like going back in time 20 years.
For wider monitoring, at key points on the network I use ntop [2] to see what's
If I want a quick overview of a given machine I load up iftop [3], which isn't very thrilling on my desktop at the moment
[0] https://i.imgur.com/O9ekuPt.png [1] https://i.imgur.com/x9l0UNd.png [2] https://i.imgur.com/gFXAxwa.png [3] https://i.imgur.com/vmpgR6i.png
All of these are trivial to install (except for the RTP perl script which I have as a custom apt-gettable package) and don't require non-standard interpreters and package managers.
Nethertheless I went to get this. I had to install 540MB of support files just to run "go get github.com/gcla/termshark/cmd/termshark". Still it compliles. Then I run it, and it shows bugger all, I suspect I need to find and install more libraries (tcell, gowid), which themselves require massive downloads.
It's simply not worth it, it's like going back in time 20 years.