From owner-freebsd-isp@FreeBSD.ORG Tue Oct 24 01:09:27 2006 Return-Path: X-Original-To: freebsd-isp@freebsd.org Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D410716A47B for ; Tue, 24 Oct 2006 01:09:27 +0000 (UTC) (envelope-from bob@buckhorn.net) Received: from whitehall.lin-tech.net (whitehall.lin-tech.net [66.118.35.201]) by mx1.FreeBSD.org (Postfix) with ESMTP id 16DFC43D5C for ; Tue, 24 Oct 2006 01:09:26 +0000 (GMT) (envelope-from bob@buckhorn.net) Received: from mail.buckhorn.net (mail.buckhorn.net [66.118.63.40]) by whitehall.lin-tech.net (Postfix) with ESMTP id D994C4AE00 for ; Mon, 23 Oct 2006 20:09:31 -0500 (CDT) Received: from [72.26.9.234] [72.26.9.234] by mail.buckhorn.net with ESMTP (SMTPD32-8.15) id A7AE136500AC; Mon, 23 Oct 2006 20:09:02 -0500 Message-ID: <453D67C6.4050402@buckhorn.net> Date: Mon, 23 Oct 2006 20:09:26 -0500 From: Bob Martin User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.12) Gecko/20051108 X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-isp@freebsd.org References: <20061024000805.GA12810@uncanny.net> <453D5EBE.1050306@mawer.org> In-Reply-To: <453D5EBE.1050306@mawer.org> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: amavisd-new at spamcontrol Subject: Re: Internet Link Detective Audit X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Oct 2006 01:09:27 -0000 There is also the old and venerable ntop, in the ports. Bob Martin Antony Mawer wrote: > On 24/10/2006 10:08 AM, Edward Elhauge wrote: > >> I'm hoping someone on this list can steer me in the right direction >> towards figuring out what is going on with my internet link. (Or rather >> the tools to figure it out on my own). >> > ... > >> >> What I'd like is a tool running on FreeBSD that will sort IP traffic >> coming across my Internet interface by: >> SRC IP, PROTOCOL and PORT >> DEST IP, PROTOCOL and PORT >> then give me total KBs passed in that interval. > > > I was recently in a similar situation and went looking for a similar > tool, and came across "darkstat" in the ports collection: > > http://www.freshports.org/net-mgmt/darkstat > > While I did find it a bit rough around the edges in terms of some of its > data display, it gave me a way to monitor and visualise my traffic flows > and identify the large offenders... > > In my case it turned out an OS X machine was set to automatically > download system updates, but because no one had applied them yet, it was > re-downloading them every day... :-) > > Hope it helps! > > -- Antony > > _______________________________________________ > freebsd-isp@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-isp > To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"