Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 28 Dec 2004 18:26:59 +0800
From:      Ganbold <ganbold@micom.mng.net>
To:        Brian Reichert <reichert@numachi.com>
Cc:        freebsd-isp@freebsd.org
Subject:   Re: ipfw Traffic statistic by countries, TLD and sites
Message-ID:  <6.2.0.14.2.20041228182206.03402eb0@202.179.0.80>
In-Reply-To: <20041228061859.GE216@numachi.com>
References:  <6.2.0.14.2.20041228120539.034089f0@202.179.0.80> <20041228061859.GE216@numachi.com>

next in thread | previous in thread | raw e-mail | index | archive | help

At 02:18 PM 12/28/2004, you wrote:
>On Tue, Dec 28, 2004 at 12:06:03PM +0800, Ganbold wrote:
> > Hi,
> >
> > I'm using ipfw in bridged mode on FreebSD 5.3
> >
> > FreeBSD fw.ub.mng.net 5.3-STABLE FreeBSD 5.3-STABLE #10: Fri Nov 19
> > 09:18:17 ULAT 2004     tsgan@fw.ub.mng.net:/usr/obj/usr/src/sys/FW  i386
> >
> > I would like to collect statistics from traffic, which passing through
> > ipfw, and make report which should include usage statistics by
> > countries, TLD, sites etc.
>
>Hmm, ntop has some cute 'views' of your network traffic; it's in
>port - go see if that's of any help...

ntop seems like eats RAM more. So I'm thinking to use p0f with GeoIP API 
and mysql to
save IPs into mysql DB and then will make some post processing.
Actually I already integrated p0f with GeoIP so there is left post 
processing part only.

thanks,

Ganbold


> > thanks in advance,
> >
> > Ganbold
>
>--
>Brian Reichert                          <reichert@numachi.com>
>37 Crystal Ave. #303                    Daytime number: (603) 434-6842
>Derry NH 03038-1713 USA                 BSD admin/developer at large



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6.2.0.14.2.20041228182206.03402eb0>