From owner-freebsd-questions@FreeBSD.ORG Fri Sep 21 20:19:40 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 67F9116A41A for ; Fri, 21 Sep 2007 20:19:40 +0000 (UTC) (envelope-from Albert.Shih@obspm.fr) Received: from mesiob.obspm.fr (mesiob.obspm.fr [145.238.2.2]) by mx1.freebsd.org (Postfix) with ESMTP id E9C6F13C480 for ; Fri, 21 Sep 2007 20:19:39 +0000 (UTC) (envelope-from Albert.Shih@obspm.fr) Received: from localhost (pcjas.obspm.fr [145.238.2.126]) by mesiob.obspm.fr (8.13.4/8.13.4/SIO Observatoire de Paris) with ESMTP id l8LKHuKF013115; Fri, 21 Sep 2007 22:17:56 +0200 Date: Fri, 21 Sep 2007 22:17:56 +0200 From: Albert Shih To: Dan Nelson Message-ID: <20070921201756.GB85057@pcjas.obspm.fr> References: <20070920172428.GA90565@pcjas.obspm.fr> <46F3F2C8.20806@lipn.univ-paris13.fr> <20070921185934.GI7562@dan.emsphone.com> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20070921185934.GI7562@dan.emsphone.com> User-Agent: Mutt/1.5.16 (2007-06-09) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-2.0.2 (mesiob.obspm.fr [145.238.2.2]); Fri, 21 Sep 2007 22:17:56 +0200 (CEST) X-Virus-Scanned: ClamAV version 0.91.2, clamav-milter version 0.91.2 on mesiob.obspm.fr X-Virus-Status: Clean Cc: Le Cocq Michel , freebsd-questions@freebsd.org Subject: Re: How to know who use NFS. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Albert.Shih@obspm.fr List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Sep 2007 20:19:40 -0000 Le 21/09/2007 à 13:59:35-0500, Dan Nelson a écrit > In the last episode (Sep 21), Le Cocq Michel said: > > Albert Shih a écrit : > > > Sometime I've a user (or some users but not lot of users) make a > > > very huge transfert through NFS. I don't want that. > > > > > > How can I known at un precise moment who charge my NFS server (I'm > > > root in both side : client and server). > > > > With some info student it also happen some times in here, and the way i > > find is to launch a tcpdum or ethereal on the server and look at which > > ip appear the more often > > I think ethereal/wireshark is your best bet too. At least with it you > can filter on the userid making an NFS request (it's rpc.auth.uid). > Unfortunately it doesn't look like there's a summary or analysis option > for NFS, so you'll have to count packets maually... Thanks for that. But my problem is the NFS traffic is heavy in standard time, and wireshark or tcpdump give my lot of lot of data. But I'm going to try again. Regards. -- Albert SHIH Observatoire de Paris Meudon SIO batiment 15 Heure local/Local time: Ven 21 sep 2007 22:16:34 CEST