I have a collection of Catalyst 4948s for which I have a general purpose Linux box I have used to span traffic to for subsequent analysis using wireshark.
I currently use Cacti for traffic graphing but that application does not provide the visibility into the protocols which comprise a graphed traffic pattern.
Is there an open source package available which can be run on the same Linux platform which in real-time could analyse traffic spanned to the same server?
My objective is to gain a better understanding of the behavior of hte traffic I am supporting on my Catalyst switches.
Thanks in advance for any insights possible on this.
