From owner-freebsd-questions Mon Jun 10 17:22:19 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx.znet.net.au (mx.znet.net.au [203.87.59.5]) by hub.freebsd.org (Postfix) with ESMTP id 1B16C37B407 for ; Mon, 10 Jun 2002 17:22:08 -0700 (PDT) Received: from swegg (dialup-72.189.220.203.acc01-apli-cai.comindico.com.au [203.220.189.72]) by mx.znet.net.au (8.9.3/8.9.3) with SMTP id KAA07826 for ; Tue, 11 Jun 2002 10:22:02 +1000 (EST) (envelope-from robbak@comnorth.com.au) From: Robbak To: freebsd-questions@freebsd.org Subject: Developing an ip accounting program. Date: Tue, 11 Jun 2002 10:10:23 +1000 X-Mailer: KMail [version 1.0.28] Content-Type: text/plain MIME-Version: 1.0 Message-Id: <02061110220000.00351@swegg> Content-Transfer-Encoding: 8bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG OK. I've drawn a blank. I previoulsy mentioned that I would do this from firewall logs. that was before I determined that they do not log packet size. What I need to do is provide to users a .html page listing the data throughput (to/from) the machines on the local subnet. I envisage a routine providing a stream of data (similar to the ipfw logging) that the procedure could parse and summarise by ip, and a script/program in cgi to extract the info and create the page. I beleive could accomplish the later steps, if I could get some help on the data input. The BPF routines look capable, but are beyond my comprehension. The nearest I have seen is the ipcad program. It sems to have much of the info I need. If someone has an annotated version of the code for it, or a similar prog., it would be a great help Thanks, Robert Backhaus (wannabe C hacker) -- The opinions Expressed herein do not necessarily reflect those of the author. Robert Backhaus Robbak@comnorth.com.au To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message