RE: Network accounting

2005-01-26 Thread Nickolay Kritsky
I am using trafd and I am quite happy with it, if I dump internal tables to disk often enough. Nick -Original Message- From: Andrew Seguin [mailto:[EMAIL PROTECTED] Sent: Monday, January 17, 2005 11:11 PM To: freebsd-net@freebsd.org Subject: Network accounting I’ve searched Google, I’v

Re: Network Accounting

2005-01-18 Thread The Jetman
I've been following this little thread and was curious about how my own solution compares w/ the others discussed. x.y.z.14 ${ipfw} add pipe 7 ip from x.y.z.14 to any ${ipfw} pipe 7 config bw 1024Kbit/s queue 50 ${ipfw} add pipe 8 ip from any to x.y.z.14 ${ipfw} pipe 8 config bw 1024Kbit

Re: Network accounting

2005-01-17 Thread Julian Elischer
Andrew Seguin wrote: I therefore ask out to the list, what recommendations for traffic accounting/statistics gathering can you give me? just for kicks you may look at what glen has in his toolkit (netgraph) for monitorring stuff. e.g. the ng_netflow netgraph module and some other stuff that has

Re: Network accounting

2005-01-17 Thread Jon Simola
On Mon, 17 Jan 2005 23:07:54 +0100, Andrew Seguin <[EMAIL PROTECTED]> wrote: > With the help, in pointing out the mask feature to me from Jon Simola, this > quite possibly might be the path I'll take (I'll sleep on it first). > Interfaces are 100Mbps, but our internet is about 50Mbps total I beli

RE: Network accounting

2005-01-17 Thread Mitch (Bitblock)
Interfaces are 100Mbps, but our internet is about 50Mbps total I believe (still have yet to get hard facts from people here). With our daily traffic, we see always 80GB total daily... but I'll keep hourly accounting in mind. [Mitch says:] With 100Mbps interfaces, you have to be prepared to clear t

RE: Network accounting

2005-01-17 Thread Andrew Seguin
-Original Message- From: Mitch (Bitblock) [mailto:[EMAIL PROTECTED] Sent: Monday, January 17, 2005 10:51 PM To: 'Andrew Seguin'; freebsd-net@freebsd.org Subject: RE: Network accounting [Mitch says:] you could also use a simple PERL program to parse the output from your ipfw co

Re: Network accounting

2005-01-17 Thread Chuck Swiger
Andrew Seguin wrote: [ ... ] I don't understand how this system will allow me to log traffic by-ip without addition of 256 rules? I already have counts of my up & down traffic. Actually, I have a bypass rule for 'normal' traffic (web/email/dns/icmp/etc), and then a pipe to control bandwidth (mainly

RE: Network accounting

2005-01-17 Thread Andrew Seguin
ECTED] Sent: Monday, January 17, 2005 10:49 PM To: Andrew Seguin; freebsd-net@freebsd.org Subject: Re: Network accounting On Mon, 17 Jan 2005 22:41:16 +0100, Andrew Seguin <[EMAIL PROTECTED]> wrote: > >What I was doing with the same setup: > >$IPFW pipe 1 config mask src-ip 0xf

RE: Network accounting

2005-01-17 Thread Mitch (Bitblock)
If I understand this correctly... I'd have to add SNMP to the server and rtg would then poll via SNMP, storing the results in the MySQL server. Seems very good, but I'm a bit hesitant just because I'd like to keep as few software packages as possible running on the firewall. [Mitch says:] y

Re: Network accounting

2005-01-17 Thread Jon Simola
On Mon, 17 Jan 2005 22:41:16 +0100, Andrew Seguin <[EMAIL PROTECTED]> wrote: > >What I was doing with the same setup: > >$IPFW pipe 1 config mask src-ip 0x buckets 512 > >$IPFW pipe 2 config mask dst-ip 0x buckets 512 > >$IPFW add 32001 pipe 1 src-ip 192.168.110.0/24 bridged > >$IP

RE: Network accounting

2005-01-17 Thread Andrew Seguin
-Original Message- From: Jon Simola [mailto:[EMAIL PROTECTED] Sent: Monday, January 17, 2005 10:27 PM To: Andrew Seguin; freebsd-net@freebsd.org Subject: Re: Network accounting ... >What I was doing with the same setup: >$IPFW pipe 1 config mask src-ip 0x buckets 512 >$IP

Re: Network accounting

2005-01-17 Thread Jon Simola
On Mon, 17 Jan 2005 21:11:13 +0100, Andrew Seguin <[EMAIL PROTECTED]> wrote: > But, here's my situation. A dedicated FreeBSD transparent firewall-bridge > with 3 NICs (two for the bridge w/o IP, one for console). I'm using IPFW for > the firewall, and at the moment I'm doing some very bare-bones s

RE: Network accounting

2005-01-17 Thread Andrew Seguin
-Original Message- From: Mitch (Bitblock) [mailto:[EMAIL PROTECTED] Subject: RE: Network accounting ... [Mitch says:] Just a thought: http://rtg.sourceforge.net ? hth If I understand this correctly... I'd have to add SNMP to the server and rtg would then poll via SNMP, st

RE: Network accounting

2005-01-17 Thread Mitch (Bitblock)
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andrew Seguin Sent: January 17, 2005 12:11 PM To: freebsd-net@freebsd.org Subject: Network accounting I've searched Google, I've searched through the FreeBSD-net archives and have gotten a few leads to what I