From owner-freebsd-chat@FreeBSD.ORG  Fri Dec  8 03:17:01 2006
Return-Path: <owner-freebsd-chat@FreeBSD.ORG>
X-Original-To: freebsd-chat@freebsd.org
Delivered-To: freebsd-chat@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 6EEA316A40F;
	Fri,  8 Dec 2006 03:17:01 +0000 (UTC)
	(envelope-from paul.koch@statseeker.com)
Received: from wally.statseeker.com (wally.statscout.com [203.39.101.146])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2A16A43CAC;
	Fri,  8 Dec 2006 03:16:04 +0000 (GMT)
	(envelope-from paul.koch@statseeker.com)
Received: from localhost (localhost [127.0.0.1])
	by wally.statseeker.com (8.13.3/8.13.3) with ESMTP id kB64hgf5011048;
	Wed, 6 Dec 2006 14:43:42 +1000 (EST)
	(envelope-from paul.koch@statseeker.com)
Received: from wally.statseeker.com ([127.0.0.1])
	by localhost (wally.statseeker.com [127.0.0.1]) (amavisd-new,
	port 10024)
	with LMTP id 10842-01; Wed,  6 Dec 2006 14:43:30 +1000 (EST)
Received: from speedy (speedy.statseeker.com [10.1.1.100])
	(authenticated bits=0)
	by wally.statseeker.com (8.13.3/8.13.3) with ESMTP id kB64hRhj011033
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT);
	Wed, 6 Dec 2006 14:43:27 +1000 (EST)
	(envelope-from paul.koch@statseeker.com)
From: Paul Koch <paul.koch@statseeker.com>
To: "Benjamin Adams" <freebsdworld@gmail.com>
Date: Wed, 6 Dec 2006 14:43:23 +1000
User-Agent: KMail/1.9.1
References: <6199c3dc0612050848g16a0911dga145485ba14bf21f@mail.gmail.com>
In-Reply-To: <6199c3dc0612050848g16a0911dga145485ba14bf21f@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200612061443.23626.paul.koch@statseeker.com>
X-Virus-Scanned: amavisd-new at statseeker.com
Cc: freebsd-net@freebsd.org, freebsd-chat@freebsd.org
Subject: Re: Bandwidth Monitoring program
X-BeenThere: freebsd-chat@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: paul.koch@statseeker.com
List-Id: Non technical items related to the community
	<freebsd-chat.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-chat>,
	<mailto:freebsd-chat-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-chat>
List-Post: <mailto:freebsd-chat@freebsd.org>
List-Help: <mailto:freebsd-chat-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-chat>,
	<mailto:freebsd-chat-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Dec 2006 03:17:01 -0000

On Wednesday 06 December 2006 02:48, Benjamin Adams wrote:
> I'm on a network that has a normal store firewall, setup as a NAT. 
> I'm trying to find a way to monitor all bandwidth by clients through
> that firewall.  I don't have the ability to just put an inline box to
> examine packets.  Is there a program where I can see whats going on
> from the computer on that network.
>
> What I'm looking for is:
> client ip : 2.3 GB
> List of ports used in bandwidth amounts.
>
>
> Thanks for any help,
> Ben Adams

If the firewall device supports netflow, you could use one of the 
netflow collector/reporter ports.  Otherwise you'll have to setup a 
mirror port on a switch, direct all the packets to another machine and 
use a program that captures/counts the packets on the wire and does the 
necessary stats.

Fyi, for real-time address/protocol LAN statistics, we submitted a port 
a few months ago in net/ltm.  You can add your own protocol types, but 
you'll need to read the supplied manual entries first :)

	Paul.