Mailinglist Archive: opensuse (2271 mails)

< Previous Next >
Re: [SLE] How to count bytes from ISP.
  • From: Louis Richards <louis@xxxxxxxxxxxxxxxxxx>
  • Date: Tue, 20 Apr 2004 09:04:42 -0400
  • Message-id: <40851FEA.3010605@xxxxxxxxxxxxxxxxxx>
Michael James wrote:

Help, what tools exist in SuSE to account for internet bytes in?

The byte-count from the ISP has gone berserk lately,
last month downloads ran to 3 Gig, (costing me over $200 in excess)
this month it's already at the limit (1.5 Gig).

Is it the teenagers downloading music? (Yes they do but not that much)
Is it the Limewire music sharing app generating traffic spontaneously?
Am I under some kind of external attack?
Have I been hacked?

Setup is a home network with 4 computers,
one of which is a server (SuSE 8.2) that hosts email and web.
Network connection is broadband and always on,
(except when I turn it off to slow the traffic).

I'm using SuSEfirewall2 with Quickmode NAT,
also a squid cache.

I'd like to know where the bulk of the bytes are coming from,
which (if any) internal computer is calling for them,
what protocols (ports) are involved?

Thanks for any pointers,
michaelj


I like ntop. I'm not sure about 8.2, but it comes with 9. I know rpms are available on rpm.pbone.net for 8.2.

Once installed go to http://localhost:3000 and then the admin tab. Go to plugins and change rrdplugin to track hosts and you will get even more info.

Sniffit is a good tool as well. It gives pretty much the same info as tcpdump but in a much more readable style.

--

Louis D. Richards
LDR Interactive Technologies




< Previous Next >
References