From owner-freebsd-questions@FreeBSD.ORG Fri Oct 20 20:31:14 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5E9B016A4AB for ; Fri, 20 Oct 2006 20:31:14 +0000 (UTC) (envelope-from zbyszek@szalbot.homedns.org) Received: from lists.lc-words.com (lists.lc-words.com [83.19.156.210]) by mx1.FreeBSD.org (Postfix) with ESMTP id B96F043FC3 for ; Fri, 20 Oct 2006 20:23:49 +0000 (GMT) (envelope-from zbyszek@szalbot.homedns.org) Received: from [127.0.0.1] (helo=localhost) by lists.lc-words.com with esmtp (Exim 4.63 (FreeBSD)) (envelope-from ) id 1Gb0u9-000I6S-U7; Fri, 20 Oct 2006 22:23:46 +0200 Date: Fri, 20 Oct 2006 22:23:45 +0200 (CEST) From: Zbigniew Szalbot X-X-Sender: zbyszek@192.168.11.51 To: Kurt Buff In-Reply-To: Message-ID: <20061020221439.V69505@192.168.11.51> References: <20061020164010.U62717@192.168.11.51> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: freebsd-questions@freebsd.org Subject: Re: monitoring lan->wan X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Oct 2006 20:31:14 -0000 Hi all, On Fri, 20 Oct 2006, Kurt Buff wrote: > If you wish to characterize the traffic to and from the Internet by > protocol and/or user, then you'll have to do something more than > simply using SNMP to monitor throughput on the router. In that case, > you'll need to have your FreeBSD box actually parse the traffic, or > get a netflow from the router (assuming that it can do that.) and ntop > is a good start for the software you want, or perhaps etherape. > Assuming that netflow isn't available from the router (and I think > that's a fairly safe bet) the trick will be making sure that your > FreeBSD box will see the traffic, and for that you'll need something > like one of the following setups: All I can do with the router is to enable logging to a syslog, which means I can connect it to FBSD, can't I? But I understand now that things will be a little more difficult than I thought :). Anyway, thanks for all the pointers! -- Zbigniew Szalbot