I tried out some ip accounting software i found while googling, but nothing really works for me. I need to account servers with only one external interface, but with some internal. I need accounting for each interface (incoming and outgoing traffic) in sum and each protocol|port for each interface in sum, on a daily and monthly base . Some mechanism that warns when unexpected high traffic occurs would be nice too. I dont want iptables/ipchains based counters, but prefer libpcap based solutions *and* because it is a linux group here it should be under GPL/MPL or a license like this. Any suggestions are appreciated Michael
On Wed, Jun 18, 2003 at 02:38:54PM +0200, GentooRulez wrote:
Any suggestions are appreciated
Try ftp://verein.lst.de/pub/people/okir/trafmon It does traffic accounting by snooping traffic, currently limited to TCP. Traffic analysis is offline, so that you can do your summaries at whatever time intervals you like. I'm using it to do TCP traffic accounting of a smallish server. It doesn't do exactly what you want, but maybe it comes close enough so that you can adapt it. Olaf -- Olaf Kirch | Anyone who has had to work with X.509 has probably okir@suse.de | experienced what can best be described as ---------------+ ISO water torture. -- Peter Gutmann
participants (3)
-
Dirk Mueller
-
GentooRulez
-
Olaf Kirch