On Wed, 30 Aug 2006 23:26:23 +0200
Manuel Woditsch <(E-Mail Removed)> wrote:
> For my diploma thesis I´m looking for a tool which can give me an
> graphical overview to the browsers used in a network and the target
> webpages. The datasource for the graphics should come from tcpdump or
> ethereal dumps, recorded at the router, but other solutions are also
> possible.
> Does anybody has any idea or knows a tool how can do that?
> I already tried the statistical functions of ethereal but it won´t
> analyse http traffic in the way I would like to.
> Ntop isn´t an alternative, as it won´t show the browsers used - or I
> didn´t find the function. :-)
That's a crazy idea.
If you were to trundle through the tcpdump output you'd have to
reassemble the packets.
Although you could just look for the UserAgent string, it's kinda
pointless as I might be looking at some TCP dump output via HTTP, which
would spoil your graphing.
What's better is to setup a transparent proxy at the gateway, possibly
using squid, this way the proxy gets the HTTP headers, then does what's
required for your stats.
You could easily configure the logging for this.
--
Regards, Ed ::
http://www.s5h.net
proud perl hacker
Mr. T doesn't wear clothes; his sweat is so tough and thick it
resembles a boiler suit in a grey green colour.