traffic analyzer

Web Site Traffic Analyzer is a must for anyone with a Web site.

All hits on a web page generate a log file. The gathering and log analysis of statistics and activity information to show patterns and performance from these log files is a marketing essential. Web Site Traffic Analyzer is not just a hit counter, but a powerful and essential marketing software.

Orion NetFlow Traffic Analyzer description
This application enables network engineers to identify and isolate the cause and source of network problems. Orion NetFlow Traffic Analyzer provides a new level of visibility into network traffic behavior and trends. By leveraging Ciscos NetFlow protocol to extract data from routers, NetFlow Traffic Analyzer provides an in-depth view into which users and applications are consuming the most bandwidth.

NetFlow Traffic Analyzer converts that data into charts and tables providing network engineers with a easy way to identify and isolate the cause and source of network problems, as well as provide historical performance information to help plan for future growth.

Pie charts show the distribution of bandwidth across different types of traffic (e.g., HTTP, FTP, VoIP) and across different users. Line charts show the usage patterns over time. In addition, this software will identify the source of external traffic inbound to the corporate network.

NetFlow Traffic Analyzer solves every-day networking concerns for networking engineers such as:
· What applications are consuming network bandwidth?
· Which users are generating the most traffic?
· What IP addresses are my top talkers?
· Should I upgrade my WAN bandwidth? Why?
· What is the historical trend of bandwidth of my WAN and LAN links?
· When my network is running hot, whats going on?

Network engineers use NetFlow Traffic Analyzer to determine:
· Application and network usage when, who, where, what,
· The impact of changes to the network
· Network anomalies
· Security vulnerabilities

NetFlow Traffic Analyzer also:
· Optimizes network resource allocation
· Enables quick troubleshooting of network problems
· Profiles users consumption patterns
· Profiles applications consumption patterns
· Enables quick access to traffic data
· Scales to monitor interfaces with multi-gigabit throughput
· Enables long-term storage of NetFlow data
· Improves performance & availability

Here are some key features of "Orion NetFlow Traffic Analyzer":

· Top-to-Bottom Network Analysis: NetFlow Traffic Analyzer enables network engineers to quickly examine Cisco NetFlow traffic data and to drill down into the data to determine traffic by user, application, department, conversation, interface and protocol. The integration with Orion Network Performance Monitor provides users with the deepest drill-down across traffic patterns and into device performance, resulting in unprecedented visibility into usage, performance and availability statistics. Competitive offerings merely infer and estimate utilization data.
· Optimized Storage Engine: NetFlow Traffic Analyzer includes a service that intelligently summarizes large amounts of raw NetFlow data, providing users quick access to historical data while minimizing storage costs. The raw data is replaced by the summary, allowing the customer to keep significant amounts of information ready for graphs and tables. In contrast, other products either limit what the users can keep, or they create large, hard-to-manage databases with expensive storage costs.
· Enterprise-Ready Management Infrastructure: NetFlow Traffic Analyzer is built on the mature Orion Network Performance Manager platform, providing users with all of the enterprise scalability and stability benefits of Orion. In contrast, other products are relatively new standalone tools with little track record of standing up to the high volume of NetFlow data that will be generated by any but the smallest enterprise.
· Reporting: Orion-style reports can be run and scheduled with Orion NetFlow Traffic Analyzer. Out-of-the-box reports include:
· Traffic by Top xx applications over y days
· Traffic by Top xx endpoints over y days
· Traffic by Top xx protocols over y days
· Traffic by Top xx domains over y days
· Traffic by IP address group over y days
· Historical NetFlow Forensics: Analysis of network traffic is much easier by enabling insight into specific periods of time. This is extremely important when diagnosing "what happened?" during a given time period, enabling a forensic analysis of the NetFlow data.
· Other key benefits with supporting features include: Enable Analytical Capacity Planning, NetFlow Traffic Analyzer highlights trends in network traffic, allowing network staff to anticipate changes in bandwidth needs for different parts of the business and plan accordingly.
· Optimize Network Resource Allocation: NetFlow Traffic Analyzer delivers the data necessary to identify areas of excess capacity and re-assign bandwidth to areas experiencing bottlenecks without necessarily increasing spending.
· Align IT Resources with Business Needs: NetFlow Traffic Analyzer shows IT staff exactly what users are doing on the network, allowing them to adjust their efforts to fully support business priorities.
· Increase Network Security: NetFlow Traffic Analyzer improves visibility into the inbound network traffic, exposing suspicious activities or anomalous patterns to identify a wide variety of intrusions, such as the SQL slammer worm, and malware that populate "fake" e-mail traffic in hopes of overloading Exchange servers.


Requirements:

· SolarWinds Orion 8.0 or greater


Limitations:

· 30 days trial

Network Traffic Analyzer analyzes the network traffic on multiple network devices and creates HTML statistics with some network usage graphs. Sometimes it is good to know, how the network is used, how many bytes were received and how many bytes were sent.Therefore, here is Network Traffic Analyzer, which creates simple network usage statistics.


Such statistics can tell you, how good your network connection really is (who cares about what Internet provider say, when was the network down, which time is the best time for downloading large packages of data etc. etc. Or with this software you can just better imagine, how many traffic can your home computer generate.

So you ve sent half a dozen e-mails, pleading with employees to stop using the corporate network for bandwidth-hogging applications like streaming music and playing World of Warcraft, but no one seems to care. You ve been called out by upper management due to poor network performance more times than you ve thought about attending Comic-Con. Now, what? Orion NetFlow Traffic Analyzer enables you to capture continuous streams of network traffic and convert those raw numbers into easy-to-interpret charts and tables that reveal exactly how the corporate network is being used, by whom and for what purpose enabling you to shut down the bandwidth hogs. NetFlow Traffic Analyzer helps you answer questions like: Which applications are consuming network bandwidth? Which users are generating the most traffic? Which IP addresses are my top talkers? Should I upgrade my WAN bandwidth? Why? What is the historical trend of bandwidth of my WAN and LAN links? When my network is running hot, whats going on?

Python Traffic Analyzer is a Python base class and sample driver script written to retrieve and manipulate images from the TrafficLand cameras and calculate a numeric value representing the current traffic flow.

PyTrAn, an example driver script, an image collector and an image mask creator are available for download from the link shown at the bottom. To use the PyTrAn package begin by choosing a camera that you wish to analyze, for this example well use the camera captioned above.

We want to construct a mask over the area of the image that we are interested in, namely the road. In this particular example the road takes up the majority of the image but that is not always the case.

We will apply the mask over captured images to fine tune the area over which we are looking for movement. To create the mask we will first need to collect a sequential series of snapshots from the target camera. The image_collector.py script was written for this task:

$ mkdir mask_200003
$ cd mask_200003
$ ../image_collector.py 200003 30
Collecting 30 images...
30

Done.

The script is hard coded to capture images on a 2-second delay. The delay is necessary to ensure the image has changed. I believe 2-seconds to be the absolute minimum. Once complete, 30 images numbered 1 through 30 will be created in the current directory.

We construct a mask from these captured images by creating a diff-image for each sequential image pair and then adding each diff-image together. Naturally, a script was written to automate this task as well:

$ ../mask_maker.py 1 30
Creating a diff for each sequential image pair.
Diffing 29

Creating the initial mask from the first image pair.

Adding the rest of the diffs to the mask.
Masking 29

Done.

A number of .diff files are generated in this process. These files repesent the movement between individual sequence pairs.

The .diff files are simply intermediary files, the important bit is the mask file, which is generated as the sum of all differences.

The mask file may be dirty (as in this case) and require manual cleanup. The basic shape of the road however is clearly visible, evidence that we can with minimal effort automate the mask generation process. Also, this run was conducted at night, day-time images yield better results.

There are a few final steps we need to take before we can use the example PyTrAn driver script. First we need to convert the mask to ASCII (noraw) format:

$ pnmnoraw mask > mask_200003.ascii

Then we need to open an ImageMagick display window and get its X-window-ID using xwininfo. Finally, update camera_id and window_id in pytran_sampling.py and launch the driver:

$ ../pytran_sampling.py
DEBUG> grabbing frame from camera 200003
DEBUG> rotating image: pytran.this > pytran.last
DEBUG> refreshing image in 3 secs
taking a 5 minute sample at various thresholds.
DEBUG> grabbing frame from camera 200003
DEBUG> generating frame diff on pytran.last, pytran.this
DEBUG> displaying image: pytran.diff
DEBUG> converting pytran.diff to ascii
DEBUG> calculating traffic ratio...
ratio[5]: 55%
DEBUG> calculating traffic ratio...
ratio[10]: 52%
...
...
5 minute sample[5]: 67.88
5 minute sample[10]: 42.66
5 minute sample[15]: 30.57
5 minute sample[20]: 23.03
5 minute sample[25]: 18.39
5 minute sample[30]: 14.79
5 minute sample[35]: 12.42
5 minute sample[40]: 10.53
5 minute sample[45]: 9.06
5 minute sample[50]: 7.85

The sampling script will take 5 minute samples at varying color thresholds. The optimal threshold must be manually chosen. Furthermore, you will need to sample the traffic ratios during both heavy and light traffic times to get a good feel for your acceptable range. Also, keep in mind that the traffic ratio value is simply the percent change detected, or in other words the movement detected within the masked region. This means that a completely empty road will register similar values to a road so congested it looks like a parking lot. The time of day can be combined with the traffic ration to determine the logical truth.

With this task implemented and abstracted more complex systems can be built. When I find the time Id like to create a system that will take multiple potential travel routes and times, and during the travel time e-mail the traveler with the best route to take. Another idea I had would be to record the traffic flow values for each camera, for each day and for each half hour interval. Travelers and other interested parties can then analyze traffic patterns to determine the fastest route dependant on date/time.

The SurfStats Website Traffic Analyzer is the best tool for exactly find what you need to know about website statistics.

Whether you have a small, medium or large website, the SurfStats Website Traffic Analyzer is the solution you need to track information on pages viewed, site visitors, browsers used, http errors and similar useful web site usage statistics on your site.

The Website Traffic Analyzer analyzes your web server log files and presents professional website traffic statistics reports using colorful graphs and tables.

Limitations:

· 30 days trial

Atelier Web Ports Traffic Analyzer description
Atelier Web Ports Traffic Analyzer log data sent and received to the Internet by your software Atelier Web Ports Traffic Analyzer is a network traffic sniffer and logger that allows you to monitor all internet and network traffic on your PC and view the actual content of the packets, showing you exactly what was transmitted and to where.

This includes all traffic initiated by software products, web sites etc. The capability to audit what flows in and out of every piece of software is critical for security aware users.

AWPTA installs a Layered Service Provider (LSP) over the base transport protocols for the AF_INET address family. You can confirm the LSP existence with Atelier Web Security Port Scanner (in the IP/Transport Protocols page).

All data sent or received using the Winsock services and the mentioned base protocols passes through the LSP and can be analyzed and captured.
AWPTA captures almost all data (except data sent and received using NT specific extensions, due to the heavy burden involved. They are not very common, anyway).

AWPTA reports all open ports, even if not listening or connected yet and no data has been sent or received! There is no other sniffer that can do that! AWPTA reports the exact number of data bytes sent and received by every process.

Bear in mind that AWPTA does not capture data sent over base protocols other than the ones mentioned (for instance NetBIOS related packets are not captured).

Also, Netbt.sys, a kernel-mode driver, opens UDP ports 137, 138 and TCP port 139 directly to the TDI interface (bypasses Winsock). This implies that you will not see what file has opened these ports.

Here are some key features of "Atelier Web Ports Traffic Analyzer":

· Real-time mapping of ports to processes (applications and services)!
· History since boot-time of all TCP, UDP and RAW ports open through Winsock and respective mapping to processes!
· Log since boot-time of data sent and received (up to 500 MB) by above ports!
· Sophisticated archiving feature allowing to review previous sessions with the same detail as the current session.


Limitations:

· 15 days trial or 15 uses trial

The Packet Analyzer is an advanced packet analysis and sniffing tool with powerful protocol decodes capabilities. It can capture all traffic passing by the machine where the tool is installed and decodes all major and frequently used protocols including TCP/IP, UDP, HTTP, HTTPS, SMTP, POP3, TELNET, FTP, etc. All information is displayed in simple English with easy to use interface for anyone to master the tool with minutes of self training. With the Packet Analyzer, you can easily filter the network traffic to focus on the information that you are looking for. Use these flexible, powerful filters during or after capture to isolate traffic by specific node, protocol, error type and/or packet content.

Atelier Web Ports Traffic Analyzer is a network traffic sniffer and logger that allows you to monitor all internet and network traffic on your PC and view the actual content of the packets, showing you exactly what was transmitted and to where.

This includes all traffic initiated by software products, web sites etc. The capability to audit what flows in and out of every piece of software is critical for security aware users.

AWPTA installs a Layered Service Provider (LSP) over the base transport protocols for the AF_INET address family. You can confirm the LSP existence with Atelier Web Security Port Scanner (in the IP/Transport Protocols page).

All data sent or received using the Winsock services and the mentioned base protocols passes through the LSP and can be analyzed and captured.
AWPTA captures almost all data (except data sent and received using NT specific extensions, due to the heavy burden involved. They are not very common, anyway).

AWPTA reports all open ports, even if not listening or connected yet and no data has been sent or received! No sniffer can do it! AWPTA reports the exact number of data bytes sent and received by every process.

Bear in mind that AWPTA does not capture data sent over base protocols other than the ones mentioned (for instance NetBIOS related packets are not captured).

Also, Netbt.sys, a kernel-mode driver, opens UDP ports 137, 138 and TCP port 139 directly to the TDI interface (bypasses Winsock). This implies that you will not see what file has opened these ports.

Here are some key features of "Atelier Web Ports Traffic Analyzer":

· Real-time mapping of ports to processes (applications and services)!
· History since boot-time of all TCP, UDP and RAW ports open through Winsock and respective mapping to processes!
· Log since boot-time of data sent and received (up to 500 MB) by above ports!
· Sophisticated archiving feature allowing to review previous sessions with the same detail as the current session.


Limitations:

· You may use this program for a period of 15 days or 15 executions free for evaluation purposes. After the evaluation period you are expected to either register it by purchasing one or more licenses, or remove it from your computer.


Whats New in This Release:

· Fixed issues with IPSec

Surfstats Log Analyzer Standard Edition description
Analyzes server log files and generates 50+ web activity reports SurfStats Log Analyzer is a useful and reliable program that can generate Website Activity and Conversion Tracking reports from log files.

Reports can be generated in various languages with output to screen, file directories, ftp or email. It supports most common log file formats with automatic log file format and compressed format detection.

Here are some key features

of "Surfstats Log Analyzer Standard Edition":

· automate and simplify log file analyzing like a Fast Reporting mode
· an Interactive Reporting mode
· Report Viewer and Printer
· FTP Client
· Task Scheduler
· DNS Lookup
· Report E-mailer
· Filter Control Panel for dynamic filtering on dates, visitors, referrers and files
· File Viewer for displaying, searching and printing of log files
· Report Theme Editor to change logos, backgrounds, fonts and colors on reports
· search engine ranking tool and a Language Editor to modify language phrases on reports


Requirements:

· Pentium 133
· Internet Explorer 4 or later


Limitations:

· 30 days free trial

SurfStats Log Analyzer generates Website Activity and Conversion Tracking reports from log files. Reports can be
generated in various languages with output to screen, file directories, ftp or email. It supports most common log file
formats with automatic log file format and compressed format detection. It comes with all the necessary tools
designed to automate and simplify log file analyzing like a Fast Reporting mode, an Interactive Reporting mode, a
Report Viewer and Printer, a FTP Client, a Task Scheduler, DNS Lookup, Report E-mailer, Filter Control Panel for
dynamic filtering on dates, visitors, referrers and files, a File Viewer for displaying, searching and printing of log files,
a Report Theme Editor to change logos, backgrounds, fonts and colors on reports, a search engine ranking tool
and a Language Editor to modify language phrases on reports. The program is 5-Star rated by Tucows, 5-Star
Shareware, SoftJam, Slaugterhouse, The File Transit, Sina, Bills Software Picks, Hispavista, JDNet, Softland
India, Softlandmark SoftList, Pauls Picks, WebAttack and Softwareseeker. The 30-day trial can run as the
Standard, Professional or Enterprise Edition. The Professional and Enterprise editions have Click Fraud Detection reports. The Enterprise edition has eCommerce reporting and can also analyze media log files.

Network Traffic Analyser provides a script-driven network traffic monitor.

Network Traffic Analyser (formerly known as sniffer) is designed to be an extremely powerful, configurable, and versatile tool for monitoring network traffic.

It can be used as a plain sniffer, as a tool for accounting, dynamic firewall updates, and many more things.

It features scripting support and an event-driven architecture.

The idea behind this project is to create a powerful tool for playing around with network traffic. The basic concepts are simplicity and flexibility. Instead of building tool that does something specific (and does a good job at it), were trying to build a tool that will be able to do whatever you want it to do (and still be good at it :).

To put it very simply, you write a script that will be invoked for every packet that passes through your network. You write your scripts in a Tcl, fully blown, interpreted programming language. That fact guaranties that you wont be constrained in your creativity.

Etherscan Analyzer is an advanced network sniffer and protocol analyzer for Windows. With Etherscan, you can capture and analyze all packets over the local network. Etherscan decodes all major protocols, including Ethernet, NetBEUI, TCP/IP, and others. Packets are decoded down to the lowest layer with analysis of the most protocols and full access to raw data is provided. Etherscan Analyzer is capable of reconstructing TCP/IP sessions. With this feature, you can easily view data in their original format, for example, you will be able to read the actual text of an email - as well as any attachment - exactly as it was sent.
With Etherscan you are able to filter for specific traffic easily. Using these flexible, powerful filters during or after capture you can isolate traffic by specific node, protocol, error type and/or packet content. Also you can set aliases to IP or MAC addresses.
Etherscan Analyzer is a helpful tool for LAN administrators, security professionals, network programmers, or anyone who wants to have a full picture of the traffic going through ones PC or LAN segment. This application is designed for Internet users and small and medium-sized networks and can run on any Windows

This Widget was created for commuters in the Minneapolis/St. Paul area that wish to study traffic patterns.

I started with the Mpls Traffic Widget by Matt Johnson and tweaked it to run on both Windows and MacOS, and added missing cameras as well as area selectors.

This is based off of Tim Honls traffic cam with modifications for the new traffic cam URL.