From owner-freebsd-questions@FreeBSD.ORG Thu Oct 26 19:09:26 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4803E16A403 for ; Thu, 26 Oct 2006 19:09:26 +0000 (UTC) (envelope-from freebsd@akruijff.dds.nl) Received: from psmtp08.wxs.nl (psmtp08.wxs.nl [195.121.247.22]) by mx1.FreeBSD.org (Postfix) with ESMTP id C09F143D49 for ; Thu, 26 Oct 2006 19:09:25 +0000 (GMT) (envelope-from freebsd@akruijff.dds.nl) Received: from ip51cc8423.speed.planet.nl (ip51cc8423.speed.planet.nl [81.204.132.35]) by psmtp08.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.07 (built Jun 24 2005)) with ESMTP id <0J7R00BEEBVCEG@psmtp08.wxs.nl> for freebsd-questions@freebsd.org; Thu, 26 Oct 2006 21:09:12 +0200 (MEST) Received: from Alex1.kruijff.org (localhost [127.0.0.1]) by ip51cc8423.speed.planet.nl (8.13.6/8.13.6) with ESMTP id k9QJ97HF003555 for ; Thu, 26 Oct 2006 21:09:07 +0200 Received: (from akruijff@localhost) by Alex1.kruijff.org (8.13.6/8.13.6/Submit) id k9QJ97wE003554 for freebsd-questions@freebsd.org; Thu, 26 Oct 2006 21:09:07 +0200 Content-return: prohibited Date: Thu, 26 Oct 2006 21:09:07 +0200 From: Alex de Kruijff In-reply-to: <20061021141934.GP31580@tigger.digitaltorque.ca> To: freebsd-questions@freebsd.org Message-id: <20061026190907.GA1479@Alex1.kruijff.org> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline User-Agent: Mutt/1.4.2.2i X-Virus-Scanned: ClamAV version 0.88.4, clamav-milter version 0.88.4 on Alex1.kruijff.org X-Virus-Status: Clean References: <20061021141934.GP31580@tigger.digitaltorque.ca> X-Authentication-warning: Alex1.kruijff.org: akruijff set sender to freebsd@akruijff.dds.nl using -f Subject: Re: traffic analysis tools X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: freebsd@akruijff.dds.nl List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Oct 2006 19:09:26 -0000 On Sat, Oct 21, 2006 at 10:19:34AM -0400, Michael P. Soulier wrote: > Hey people, > > I'd like something to look at traffic use through my gateway, so I know how > much of my upload bandwidth and download bandwidth is in use at any time. > Ideally it'll tell me from where, so I can look at internal abusers, or get an > idea of where hits are coming from. > > Off the top of my head, I can think of two tools. > > 1. ntop - great web interface, but I've found it unstable > 2. iptraf - good curses interface, but I'm looking for trend monitoring > 3. mrtg - as I'm running snmp, so I could just monitor it from a desktop > running mrtg... > > Any other suggestions? The firewall ipfw comes with a counter option. You could collect this information out the firewall with ipa into its database. Then create graphs with mrtg. I have two articles about how to do this on my website. -- Alex Please copy the original recipients, otherwise I may not read your reply. Howtos based on my personal use, including information about setting up a firewall and creating traffic graphs with MRTG http://alex.kruijff.org/FreeBSD/