Date: Tue, 24 Oct 2006 10:30:54 +1000 From: Antony Mawer <fbsd-isp@mawer.org> To: ee@uncanny.net Cc: freebsd-isp@freebsd.org Subject: Re: Internet Link Detective Audit Message-ID: <453D5EBE.1050306@mawer.org> In-Reply-To: <20061024000805.GA12810@uncanny.net> References: <20061024000805.GA12810@uncanny.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On 24/10/2006 10:08 AM, Edward Elhauge wrote: > I'm hoping someone on this list can steer me in the right direction > towards figuring out what is going on with my internet link. (Or rather > the tools to figure it out on my own). > ... > > What I'd like is a tool running on FreeBSD that will sort IP traffic > coming across my Internet interface by: > SRC IP, PROTOCOL and PORT > DEST IP, PROTOCOL and PORT > then give me total KBs passed in that interval. I was recently in a similar situation and went looking for a similar tool, and came across "darkstat" in the ports collection: http://www.freshports.org/net-mgmt/darkstat While I did find it a bit rough around the edges in terms of some of its data display, it gave me a way to monitor and visualise my traffic flows and identify the large offenders... In my case it turned out an OS X machine was set to automatically download system updates, but because no one had applied them yet, it was re-downloading them every day... :-) Hope it helps! -- Antony
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?453D5EBE.1050306>