Pajlatek wrote:
Thanx for reply guys,i think port mirror will be enugh.
I wonder what proccessor and disk i would have to buy for pmacct to
count a gigabit trafic per ip(about 2000 ip's).:P
Any suggestions?
Just out of curiosity...
It depends on how you wish to account. For example, perpetually by hour
per IP? TCP/UDP ports? IP protocols? etc...
I'm doing counting for 7500 IPs on a 100 mbit network, with a dual Xeon
2.8 GHz (plus Hyperthreading), 1GB RAM, SCSI RAID5 with I think 4 disks.
pmacctd is running on seperate collector machines. Counting is down on
hourly/daily/monthly basis and is keeping up fine. Load sits around 1 -
2 most of the time.
Wim
