From owner-freebsd-net@FreeBSD.ORG Wed Dec 6 18:01:33 2006 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id D5EE416A415 for ; Wed, 6 Dec 2006 18:01:33 +0000 (UTC) (envelope-from julian@elischer.org) Received: from outU.internet-mail-service.net (outU.internet-mail-service.net [216.240.47.244]) by mx1.FreeBSD.org (Postfix) with ESMTP id 132EB43CA3 for ; Wed, 6 Dec 2006 18:00:47 +0000 (GMT) (envelope-from julian@elischer.org) Received: from shell.idiom.com (HELO idiom.com) (216.240.47.20) by out.internet-mail-service.net (qpsmtpd/0.32) with ESMTP; Wed, 06 Dec 2006 09:47:29 -0800 Received: from [192.168.2.4] (home.elischer.org [216.240.48.38]) by idiom.com (8.12.11/8.12.11) with ESMTP id kB6I1V8Y039616; Wed, 6 Dec 2006 10:01:31 -0800 (PST) (envelope-from julian@elischer.org) Message-ID: <4577057B.7060801@elischer.org> Date: Wed, 06 Dec 2006 10:01:31 -0800 From: Julian Elischer User-Agent: Thunderbird 1.5.0.8 (Macintosh/20061025) MIME-Version: 1.0 To: Josh Paetzel References: <6199c3dc0612050848g16a0911dga145485ba14bf21f@mail.gmail.com> <200612060313.23621.josh@tcbug.org> <4576EB9D.2040300@elischer.org> <200612061153.26040.josh@tcbug.org> In-Reply-To: <200612061153.26040.josh@tcbug.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-net@freebsd.org, Benjamin Adams , Brett Glass Subject: Re: Bandwidth Monitoring program X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Dec 2006 18:01:33 -0000 Josh Paetzel wrote: > On Wednesday 06 December 2006 10:11, Julian Elischer wrote: >> Josh Paetzel wrote: >>> On Tuesday 05 December 2006 23:52, Brett Glass wrote: >>>> Add a few IPFW "count" rules to count the bytes and packets. >>>> Then, periodically harvest and reset the counters via a cron job >>>> and write the results to a file. You can then prepare tables and >>>> charts which are as simple or as fancy as you please, without >>>> resorting to SNMP (which isn't secure). A little bit of code in >>>> your favorite scripting language will do it. And of course you >>>> can output to a graphing package, though for me a simple >>>> histogram using asterisks has sufficient precision in most >>>> cases. >>>> >>>> --Brett Glass >>> Just curious.....but where is he going to run ipfw? I seriously >>> doubt his router can run it, and what good is it going to do him >>> to run it on a machine on the network if the network is switched? >>> It's not going to be able to see any of the traffic other than >>> what that specific machine is sending/receiving. >> run ipfw in layer 2 after turning on promiscuous mode and attaching >> it to a hub. >> >> I do it all the time. >> > > He specifically said in his original post that putting a machine > between the router and his lan wasn't an option. His question > was, "Is there a program where I can see whats going on from the > computer on that network?" The answer to that question is, if he's on > a switched network, no. Not without a topology change. If he can't > put a box between the switch and router how likely is it that he's > going to be able to put a hub between the switch and router and then > attach a box to that? I'd say that adding a hub is quite possible.. > >