Re: Advice for an IP accounting program

2004-10-19 Thread Hilko Bengen
Craig Sanders <[EMAIL PROTECTED]> writes: >> With a little know-how in shell-scripting, it should be trivial to >> generate statistics and graphs from its output. > > if you modified it to produce Netflow output (same as cisco and > other routers), then there's a good range of tools which already

Re: Advice for an IP accounting program

2004-10-19 Thread Craig Sanders
On Tue, Oct 19, 2004 at 09:31:24PM +0100, Steve Kemp wrote: > On Wed, Oct 20, 2004 at 06:18:26AM +1000, Craig Sanders wrote: > > > btw, there are also two libpcap-based netflow capturers already debianised - a > > netfilter/ulog alternative would be a good thing. > > > > fprobe - exports NetFlow

Re: Advice for an IP accounting program

2004-10-19 Thread Steve Kemp
On Wed, Oct 20, 2004 at 06:18:26AM +1000, Craig Sanders wrote: > btw, there are also two libpcap-based netflow capturers already debianised - a > netfilter/ulog alternative would be a good thing. > > fprobe - exports NetFlow V5 datagrams to a remote collector > pmacct - promiscuous mode traffic a

Re: Advice for an IP accounting program

2004-10-19 Thread Craig Sanders
On Tue, Oct 19, 2004 at 06:13:03PM +0200, Hilko Bengen wrote: > "Francesco P. Lovergine" <[EMAIL PROTECTED]> writes: > > > The main purpose is identify periodically boxes on an internal > > private network which cause very high traffic, due to worms, virus > > and so. A per-IP simple report a la m

Re: Advice for an IP accounting program

2004-10-19 Thread Hilko Bengen
"Francesco P. Lovergine" <[EMAIL PROTECTED]> writes: > The main purpose is identify periodically boxes on an internal > private network which cause very high traffic, due to worms, virus > and so. A per-IP simple report a la mrtg could be nice. My ulog-acctd, installed on the border router using

Re: Advice for an IP accounting program

2004-10-15 Thread Alex Borges
martin f krafft wrote: also sprach Alex Borges <[EMAIL PROTECTED]> [2004.10.15.1742 +0200]: The best ive seen was not in debian when i chacked. Its an ipacc but patched to lazyly report to a mysql database. This way the measurement doesnt take a lot of resources in a really demanding environmen

Re: Advice for an IP accounting program

2004-10-15 Thread martin f krafft
also sprach Alex Borges <[EMAIL PROTECTED]> [2004.10.15.1742 +0200]: > The best ive seen was not in debian when i chacked. Its an ipacc > but patched to lazyly report to a mysql database. This way the > measurement doesnt take a lot of resources in a really demanding > environment Yeah, except fo

Re: Advice for an IP accounting program

2004-10-15 Thread Alex Borges
martin f krafft wrote: also sprach Francesco P. Lovergine <[EMAIL PROTECTED]> [2004.10.15.1702 +0200]: The main purpose is identify periodically boxes on an internal private network which cause very high traffic, due to worms, virus and so. A per-IP simple report a la mrtg could be nice.

Re: Advice for an IP accounting program

2004-10-15 Thread Francesco P. Lovergine
On Fri, Oct 15, 2004 at 05:09:02PM +0200, martin f krafft wrote: > also sprach Francesco P. Lovergine <[EMAIL PROTECTED]> [2004.10.15.1702 +0200]: > > The main purpose is identify periodically boxes on an internal private > > network which cause very high traffic, due to worms, virus and so. > >

Re: Advice for an IP accounting program

2004-10-15 Thread Francesco P. Lovergine
On Fri, Oct 15, 2004 at 04:12:17PM +0100, Gerhard Venter wrote: > > You might like the bandwidthd Debian package which is at > http://fjortis.info/pub/debian/ > Mmm, yes thanks quite near to what I was looking for, ntop is unfortunately too much complicated for a naive user. If you are yet look

Re: Advice for an IP accounting program

2004-10-15 Thread Gerhard Venter
Hi You might like the bandwidthd Debian package which is at http://fjortis.info/pub/debian/ Gerhard Francesco P. Lovergine wrote: The main purpose is identify periodically boxes on an internal private network which cause very high traffic, due to worms, virus and so. A per-IP simple report a la

Re: Advice for an IP accounting program

2004-10-15 Thread martin f krafft
also sprach Francesco P. Lovergine <[EMAIL PROTECTED]> [2004.10.15.1702 +0200]: > The main purpose is identify periodically boxes on an internal private > network which cause very high traffic, due to worms, virus and so. > A per-IP simple report a la mrtg could be nice. apt-cache search ip acco

Advice for an IP accounting program

2004-10-15 Thread Francesco P. Lovergine
The main purpose is identify periodically boxes on an internal private network which cause very high traffic, due to worms, virus and so. A per-IP simple report a la mrtg could be nice. -- Francesco P. Lovergine -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". T