|
|
|
| Downloads: 1,152 |
 Tell us about an update
|
 |
|
User Rating:
Rated by: |
Excellent (5.0/5)
18 user(s) |
|
|
|
BitTally description
|
Network traffic monitor with DPI technology for offices, schools, libraries and home.
BitTally is a complex and reliable network monitoring application. It's not a low-level packet sniffer, like those used mostly by network administrators, programmers, and other geek types. BitTally is for normal people - like managers, parents, etc - who want to know what is going on on their networks.
Like sniffers, BitTally must see all network traffic. So it must be connected to a hub, mirror port of a switch, etc. There are many possible variations (described in detail in the manual). In the simplest configuration BitTally may run on the single user's computer.
Stateful Traffic Analysis
BitTally keeps track of all active connections from beginning to end so every packet, byte, and bit can be tallied properly, attributed to a correct protocol, user, etc.
Deep Packet Inspection (DPI)
It means that application protocols are not recognized by port numbers or other shallow packet-level characteristics. This simply doesn't work with many protocols, neither does simple pattern recognition (e.g. BitTorrent may look like HTTP, and Skype mimics HTTPS to avoid detection).
BitTally recognizes application protocols by:
· Protocol-specific signatures,
· Analysis of other connections (e.g. FTP control connection carries information about future data connections),
· Heuristic analysis of behavioral patterns, and finally, if everything else fails,
· Port numbers.
User-aware
Traffic statistics are collected for users and destination networks rather than raw IP addresses. For it to work properly you must tell BitTally how to map IP or MAC addresses to meaningful user IDs, and peer IP addresses to network IDs (this is optional; by default there are just two networks: “Internal” and “Internet”).
Client-server architecture
BitTally consists of two components: Monitor and Client:
· Monitor collects traffic statistics, detects suspicious activites, kills unwanted traffic, generates reports. It has no user interface and runs as Windows service.
· Client is a GUI application that controls Monitor. It may be installed on any computer (local or remote) and is used by the administrators to configure Monitor, generate traffic reports, watch real-time traffic information.
· In addition to the standard GUI client, any web browser may be used to control the monitor. In this case no setup whatsoever is required on client machines.
With BittTally you can easily create your own custom applications to save traffic data in a database of your own, periodically reconfigure Monitor's IP-to-user mapping using data obtained from your DHCP or RADIUS server, and so on.
Here are some key features of "BitTally":
· Collects detailed traffic statistics by user, network, application protocol (HTTP, BitTorrent, Skype,etc.), domain, domain category (Adult, Gambling, Media), country.
· Allows the administrator to set up triggers to detect suspicious activities in real time (e.g. to identify P2P or e-mail abusers).
· Resets unwanted TCP connections and redirects HTTP (criteria: user, application protocol, network, domain, domain category, country, time of day, day of week, traffic volume, the number of inbound/outbound connections, etc.)
Requirements:
· WinPcap
Limitations:
· It can only track traffic of 5 users and it does not support capture action. What's New in This Release: [ read full changelog ]
· Fixed a bug in web UI: authetication should not be required for paths under /public
|
|
 | | Softpedia guarantees that BitTally 1.4.112 is 100% CLEAN, which means it does not contain any form of malware, including spyware, viruses, trojans and backdoors. [read more >] |
|
Find us on Google+
