[ILUG] [Possibly OT] Network Traffic Analysis and Interface Control

[Hamilton, David (TSG C&I)]

I am looking for a way of getting a machine to monitor traffic of a
specific type between specific hosts, and when more than a certain
threshold of TCP re-Transmissions occur in a specified period, have the
machine shut down a cisco router interface via SNMP for a specific
period of time, and then re-open it afterwards.
I am not hugely fussed about platform choice, although I think I have a
better chance of finding what I'm looking for on a linux platform.
I am currently using ethereal to capture the data from the network, but
can't find a way of getting it to automagically do anything with the
data captured.
None of the sniffers included in backtrack (http://iwhax.net) seem to
support this kind of operation.
Nice interface for configuration would be a bonus, but not a
requirement.

Thanks,
	David.

David Hamilton
Senior Technical Consultant
HP Services