Date: Thu, 25 Nov 1999 23:51:54 +1100 From: jesse reynolds <jesse@va.com.au> To: Bryan Collins <bryan@casper.spirit.net.au>, tom@sdf.com (Tom) Cc: ck@toplink.net (Christian Kratzer), pi@complx.LF.net (Kurt Jaeger), vandj@securenet.net (Jean M. Vandette), freebsd-isp@FreeBSD.ORG Subject: Re: IP or packet Accounting Software for burst connections. Message-ID: <v0420550bb462e0f85320@[1.1.1.3]> In-Reply-To: <199911250505.QAA45460@casper.spirit.net.au> References: <199911250505.QAA45460@casper.spirit.net.au>
next in thread | previous in thread | raw e-mail | index | archive | help
At 4:05 PM +1100 25/11/1999, Bryan Collins wrote:
>I've actually used a few different methods of IP accounting,
>ranging from hacked tcpdumps, hacked netramet, a custom BPF perl5 capture,
>and what I'm using right now, which is snmp to cisco IP accounting...
>
>tcpdump worked as an interim, but being promiscuous, we couldnt
>guarantee all packets be counted.
>
>The custom bpf system that we wrote was rather sweet, it had process pools
>and so on, so that once a given ammount of traffic was counted, that process
>went off to aggregate it, while another capture process started.
>
>But by far the easiest and cleanest is our snmp queries to cisco's
>IP accounting (and checkpoint IP accounting) on
>both border routers and access servers. nothing gets missed now.
What about netramet? I've just been reading the docs at the
aforementioned URL and it looks pretty sophisticated. How did it work
for you? Does it just work in promiscuous mode?
Also, why do you separate the listener from the bean counter???
Cheers
Jesse
--
Jesse Reynolds - Virtual Artists Pty Ltd - http://www.va.com.au
Email: jesse (at) va.com.au - http://virtual.artists
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?v0420550bb462e0f85320>