Re: Network accounting

2005-01-17 Thread Julian Elischer
Andrew Seguin wrote: I therefore ask out to the list, what recommendations for traffic accounting/statistics gathering can you give me? just for kicks you may look at what glen has in his toolkit (netgraph) for monitorring stuff. e.g. the ng_netflow netgraph module and some other stuff that has

Re: Network accounting

2005-01-17 Thread Jon Simola
On Mon, 17 Jan 2005 23:07:54 +0100, Andrew Seguin <[EMAIL PROTECTED]> wrote: > With the help, in pointing out the mask feature to me from Jon Simola, this > quite possibly might be the path I'll take (I'll sleep on it first). > Interfaces are 100Mbps, but our internet is about 50Mbps total I beli

Re: Invalid 'route change' functioning

2005-01-17 Thread Ruslan Ermilov
On Mon, Jan 17, 2005 at 07:20:53PM +0300, Vladimir Grebenschikov wrote: > Ruslan Ermilov wrote: > > > > Any ideas what wrong with 'route change' ? > > > > > The route(8) manpage says: > > > > : In a change or add command where the destination and gateway are not suf- > > : ficient to specify th

RE: Network accounting

2005-01-17 Thread Mitch (Bitblock)
Interfaces are 100Mbps, but our internet is about 50Mbps total I believe (still have yet to get hard facts from people here). With our daily traffic, we see always 80GB total daily... but I'll keep hourly accounting in mind. [Mitch says:] With 100Mbps interfaces, you have to be prepared to clear t

Re: pf & clonable devices

2005-01-17 Thread Max Laier
On Monday 17 January 2005 18:19, Eric Masson wrote: > Hi, > > uname -a : > FreeBSD srvbsdnanssv.interne.kisoft-services.com 5.3-STABLE FreeBSD > 5.3-STABLE #0: Tue Jan 11 11:44:56 CET 2005 > [EMAIL PROTECTED]:/vol0/build/usr/src/sys/K6II > i386 > > kldstat : > Id Refs AddressSize Name

RE: Network accounting

2005-01-17 Thread Andrew Seguin
-Original Message- From: Mitch (Bitblock) [mailto:[EMAIL PROTECTED] Sent: Monday, January 17, 2005 10:51 PM To: 'Andrew Seguin'; freebsd-net@freebsd.org Subject: RE: Network accounting [Mitch says:] you could also use a simple PERL program to parse the output from your ipfw counter list..

Re: Network accounting

2005-01-17 Thread Chuck Swiger
Andrew Seguin wrote: [ ... ] I don't understand how this system will allow me to log traffic by-ip without addition of 256 rules? I already have counts of my up & down traffic. Actually, I have a bypass rule for 'normal' traffic (web/email/dns/icmp/etc), and then a pipe to control bandwidth (mainly

RE: Network accounting

2005-01-17 Thread Andrew Seguin
Much clearer! Thank you very much and sorry for my ignorance. Hadn't caught on to the "mask" feature ;) This could be very well what I'm in need of... but any other suggestions from the list are still welcome! -Original Message- From: Jon Simola [mailto:[EMAIL PROTECTED] Sent: Monday, Ja

RE: Network accounting

2005-01-17 Thread Mitch (Bitblock)
If I understand this correctly... I'd have to add SNMP to the server and rtg would then poll via SNMP, storing the results in the MySQL server. Seems very good, but I'm a bit hesitant just because I'd like to keep as few software packages as possible running on the firewall. [Mitch says:] y

Re: Network accounting

2005-01-17 Thread Jon Simola
On Mon, 17 Jan 2005 22:41:16 +0100, Andrew Seguin <[EMAIL PROTECTED]> wrote: > >What I was doing with the same setup: > >$IPFW pipe 1 config mask src-ip 0x buckets 512 > >$IPFW pipe 2 config mask dst-ip 0x buckets 512 > >$IPFW add 32001 pipe 1 src-ip 192.168.110.0/24 bridged > >$IP

Using aliased IPs for outbound requests

2005-01-17 Thread Mike Wesson
Hi there, I have a client who wants a http proxy set up using multiple ips, and he wants the IP the request is sent to to send the outbound request, rather than the interfaces main IP. I've done the usual google searching and consulted the documentation for both Squid and mod_proxy and have not fo

RE: Network accounting

2005-01-17 Thread Andrew Seguin
-Original Message- From: Jon Simola [mailto:[EMAIL PROTECTED] Sent: Monday, January 17, 2005 10:27 PM To: Andrew Seguin; freebsd-net@freebsd.org Subject: Re: Network accounting ... >What I was doing with the same setup: >$IPFW pipe 1 config mask src-ip 0x buckets 512 >$IPFW pipe 2

Re: Network accounting

2005-01-17 Thread Jon Simola
On Mon, 17 Jan 2005 21:11:13 +0100, Andrew Seguin <[EMAIL PROTECTED]> wrote: > But, here's my situation. A dedicated FreeBSD transparent firewall-bridge > with 3 NICs (two for the bridge w/o IP, one for console). I'm using IPFW for > the firewall, and at the moment I'm doing some very bare-bones s

RE: Network accounting

2005-01-17 Thread Andrew Seguin
-Original Message- From: Mitch (Bitblock) [mailto:[EMAIL PROTECTED] Subject: RE: Network accounting ... [Mitch says:] Just a thought: http://rtg.sourceforge.net ? hth If I understand this correctly... I'd have to add SNMP to the server and rtg would then poll via SNMP, storing th

RE: Network accounting

2005-01-17 Thread Mitch (Bitblock)
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andrew Seguin Sent: January 17, 2005 12:11 PM To: freebsd-net@freebsd.org Subject: Network accounting I've searched Google, I've searched through the FreeBSD-net archives and have gotten a few leads to what I

Re: pppoe perfomance

2005-01-17 Thread Gleb Smirnoff
On Sun, Jan 09, 2005 at 01:40:50PM +0300, hydros wrote: h> Does anyone tested a perfomance of pppoe+freebsd as server? h> How much cpu\ram does it east with a different vpn load. h> I`m trying to make a server and not sure does the hardware would be able to h> serve my LAN users h> server pII-450 h

Network accounting

2005-01-17 Thread Andrew Seguin
I’ve searched Google, I’ve searched through the FreeBSD-net archives and have gotten a few leads to what I’m seeking, but unfortunately, nothing solid enough for me to go off of (so yes, I’ve been doing some homework first! ;) ) But, here’s my situation. A dedicated FreeBSD transparent firewall

[TEST/REVIEW] ng_ipfw: node to glue together ipfw(4) and netgraph(4)

2005-01-17 Thread Gleb Smirnoff
Dear collegues, here is quite a simple node for direct interaction between ipfw(4) and netgraph(4). It is going to be more effective and error-prone than a complicated construction around divert socket and ng_ksocket[1]. The semantics of node operation are quite simple. There is one node per

ALTQ patch for if_vlan.c

2005-01-17 Thread Jon Simola
(CC's to [EMAIL PROTECTED], I'm not subscribed to the -net list) I whipped up this against 5.3-STABLE #1: Wed Dec 22 17:11:02 PST 2004 I've had this patch in operation for a week on my router that serves 500 DSL customers and I've had no problems with it. On the -stable list it was mentioned that

pf & clonable devices

2005-01-17 Thread Eric Masson
Hi, uname -a : FreeBSD srvbsdnanssv.interne.kisoft-services.com 5.3-STABLE FreeBSD 5.3-STABLE #0: Tue Jan 11 11:44:56 CET 2005 [EMAIL PROTECTED]:/vol0/build/usr/src/sys/K6II i386 kldstat : Id Refs AddressSize Name 1 19 0xc040 2f6a20 kernel 21 0xc06f7000 14f08if_pp

Re: Invalid 'route change' functioning

2005-01-17 Thread Vladimir Grebenschikov
В пн, 17/01/2005 в 18:05 +0200, Ruslan Ermilov пишет: > > Any ideas what wrong with 'route change' ? > > > The route(8) manpage says: > > : In a change or add command where the destination and gateway are not suf- > : ficient to specify the route (as in the ISO case where several interfaces > :

Re: Invalid 'route change' functioning

2005-01-17 Thread Ruslan Ermilov
On Mon, Jan 17, 2005 at 06:08:38PM +0300, Vladimir Grebenschikov wrote: > Hi > > I am try to do following thing - configure another interface with same > address on same broadcast segment (but wired) and then change route > entry from one interface to another: > > > # ifconfig iwi0 > iwi0: flags

Re: Invalid 'route change' functioning

2005-01-17 Thread Vladimir Grebenschikov
В пн, 17/01/2005 в 10:22 -0500, John Barbieri пишет: > Vladimir Grebenschikov wrote: > > >Hi > > > >I am try to do following thing - configure another interface with same > >address on same broadcast segment (but wired) and then change route > >entry from one interface to another: > > > > > ># ifc

Re: Invalid 'route change' functioning

2005-01-17 Thread John Barbieri
Vladimir Grebenschikov wrote: Hi I am try to do following thing - configure another interface with same address on same broadcast segment (but wired) and then change route entry from one interface to another: # ifconfig iwi0 iwi0: flags=8843 mtu 1500 inet 192.168.1.111 netmask 0xfe00 bro

Invalid 'route change' functioning

2005-01-17 Thread Vladimir Grebenschikov
Hi I am try to do following thing - configure another interface with same address on same broadcast segment (but wired) and then change route entry from one interface to another: # ifconfig iwi0 iwi0: flags=8843 mtu 1500 inet 192.168.1.111 netmask 0xfe00 broadcast 192.168.1.255

Re: ttl-exceeded sourced by arrival interface ?

2005-01-17 Thread Julien Lesaint
On Sat, Jan 15, 2005 at 09:46:54PM -0500, Chuck Swiger wrote: > Julien Lesaint wrote: > >Quick reminder: in the case the route to the packet's source is not the > >interface this packet arrived on, do we have a way to source ICMP errors > >(ttl-exceeded) with the original interface's IP address ? >

Broadcom BCM5703 query

2005-01-17 Thread Gareth Hopkins
Howdie, I have two identical Dell 2650's. One is running 4.11 and the other is running 5.3 For some reason which I have been battling with for the past 4 hours, the 4.11 box will not pass more than 10MB/s of traffic. The 5.3 box passes between 30-40 MB/s. Both machines are connected to a Netapp F

Current problem reports assigned to you

2005-01-17 Thread FreeBSD bugmaster
Current FreeBSD problem reports Critical problems Serious problems S Submitted Tracker Resp. Description --- o [2002/07/26] kern/41007 net overfull traffic on third and fourth adap 1 problem total.