From owner-freebsd-questions Wed Nov 29 15:14:25 2000 Delivered-To: freebsd-questions@freebsd.org Received: from hindenburg.eboai.org (hindenburg.eboai.org [206.183.134.245]) by hub.freebsd.org (Postfix) with ESMTP id 7E1F337B401 for ; Wed, 29 Nov 2000 15:14:23 -0800 (PST) Received: by hindenburg.eboai.org (Postfix, from userid 1000) id 6E7B03DA2; Wed, 29 Nov 2000 18:14:22 -0500 (EST) Date: Wed, 29 Nov 2000 18:14:22 -0500 From: Chip Marshall To: Joe Oliveiro Cc: freebsd-questions@freebsd.org Subject: Re: Network monitoring Message-ID: <20001129181422.A60319@setzer.chocobo.cx> Reply-To: chip@chocobo.cx References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.1.4i In-Reply-To: ; from joe@advancewebhosting.com on Wed, Nov 29, 2000 at 05:15:46PM -0500 X-URL: http://www.chocobo.cx/chip/ X-OS: FreeBSD 3.4-RELEASE i386 up 258 days, 17:36 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On November 29, 2000, Joe Oliveiro sent me the following: > I need to monitor the ip traffic of the network without each and every > computer running a snmpd. For this i have ran FE from the router to a hub > then the hub to the rest of the network. Now i'm looking for a program > which will sniff the network and create stats of bandwidth usage per ip > address. Is there such a program that already exists? One of the tricks I've used to do this sort of thing in the past is to setup and ipfw rule for each ip address you want to monitor. By using ipfw count rules, you can get a count of the number of packets and number of bytes matching each rule, then you just need a script to check this from time to time and record it. It's not a great solution, but it works. -- Chip Marshall http://www.chocobo.cx/chip/ Finger for PGP GCM/CS d+(-) s+:++ a18>? C++ UB++++$ P+++$ L- E--- W++ N+@ o K- w O M+ V-- PS PE Y? PGP++ t+@ 5 X R>+ tv+() b++>+++ DI++++ D(-) G++ e>++ h!>++ r-- y- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message