From: [EMAIL PROTECTED] > I just searched the net for hours but didn't find a > reasonable solution. > My intention is to get traffic graphs, like the ones in mrtg for > interfaces but for specific services (that is one for ftp, > one for http > and so on). > > First idea was to use mrtg/snmp that I already use for simple > interface-based traffic monitoring. But net-snmp has no MIB that > presents a service-based differentiation as far as I found out.
That would be a mess to try to implement in SNMP because of how variable it is. You would be well served by Netflow graphs. You can get traffic breakdowns in a very granular fashion and the right frontend will allow you to drill down in a very granular fashion. There are a couple of utils that can give you netflow capabilities, including flowd and pfflowd in the ports tree. You can also look into Ntop if you are interested in a pretty web frontend for it, or maybe the Argus project will have something for you. DS
