From owner-freebsd-questions@FreeBSD.ORG Fri Sep 21 18:59:38 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1660D16A417 for ; Fri, 21 Sep 2007 18:59:38 +0000 (UTC) (envelope-from dan@dan.emsphone.com) Received: from dan.emsphone.com (dan.emsphone.com [199.67.51.101]) by mx1.freebsd.org (Postfix) with ESMTP id D059E13C44B for ; Fri, 21 Sep 2007 18:59:37 +0000 (UTC) (envelope-from dan@dan.emsphone.com) Received: (from dan@localhost) by dan.emsphone.com (8.14.1/8.14.1) id l8LIxZg5021326; Fri, 21 Sep 2007 13:59:35 -0500 (CDT) (envelope-from dan) Date: Fri, 21 Sep 2007 13:59:35 -0500 From: Dan Nelson To: Le Cocq Michel Message-ID: <20070921185934.GI7562@dan.emsphone.com> References: <20070920172428.GA90565@pcjas.obspm.fr> <46F3F2C8.20806@lipn.univ-paris13.fr> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <46F3F2C8.20806@lipn.univ-paris13.fr> X-OS: FreeBSD 7.0-CURRENT User-Agent: Mutt/1.5.16 (2007-06-09) Cc: Albert.Shih@obspm.fr, freebsd-questions@freebsd.org Subject: Re: How to know who use NFS. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Sep 2007 18:59:38 -0000 In the last episode (Sep 21), Le Cocq Michel said: > Albert Shih a écrit : > > Sometime I've a user (or some users but not lot of users) make a > > very huge transfert through NFS. I don't want that. > > > > How can I known at un precise moment who charge my NFS server (I'm > > root in both side : client and server). > > With some info student it also happen some times in here, and the way i > find is to launch a tcpdum or ethereal on the server and look at which > ip appear the more often I think ethereal/wireshark is your best bet too. At least with it you can filter on the userid making an NFS request (it's rpc.auth.uid). Unfortunately it doesn't look like there's a summary or analysis option for NFS, so you'll have to count packets maually... -- Dan Nelson dnelson@allantgroup.com