From owner-freebsd-questions@FreeBSD.ORG Sat Oct 21 14:52:59 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2E7FA16A407 for ; Sat, 21 Oct 2006 14:52:59 +0000 (UTC) (envelope-from joao.barros@gmail.com) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.191]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4AB8F43D55 for ; Sat, 21 Oct 2006 14:52:55 +0000 (GMT) (envelope-from joao.barros@gmail.com) Received: by nf-out-0910.google.com with SMTP id p77so1771291nfc for ; Sat, 21 Oct 2006 07:52:55 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=FKBMJWBiEiTjZu9gEtaOb+uLuPynd4rx/xHSNZ6VrE2gkmUM/j1eQt28fKOAUYbvQLMP9k/V3SqePNJ0QxOkZvNaLMZbJh4RqyW9bkXia4uiaV/rhLE1n1CjJzVfFQZw/qKBNGz5GWRlDaE5CaFTuFNoKfGBZ4cGfGmGFztfR0M= Received: by 10.78.185.7 with SMTP id i7mr3925704huf; Sat, 21 Oct 2006 07:52:54 -0700 (PDT) Received: by 10.78.173.8 with HTTP; Sat, 21 Oct 2006 07:52:54 -0700 (PDT) Message-ID: <70e8236f0610210752q44e41778wefb3346d15e89a18@mail.gmail.com> Date: Sat, 21 Oct 2006 15:52:54 +0100 From: "Joao Barros" To: freebsd-questions@freebsd.org In-Reply-To: <20061021141934.GP31580@tigger.digitaltorque.ca> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <20061021141934.GP31580@tigger.digitaltorque.ca> Subject: Re: traffic analysis tools X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Oct 2006 14:52:59 -0000 On 10/21/06, Michael P. Soulier wrote: > Hey people, > > I'd like something to look at traffic use through my gateway, so I know how > much of my upload bandwidth and download bandwidth is in use at any time. > Ideally it'll tell me from where, so I can look at internal abusers, or get an > idea of where hits are coming from. > > Off the top of my head, I can think of two tools. > > 1. ntop - great web interface, but I've found it unstable > 2. iptraf - good curses interface, but I'm looking for trend monitoring > 3. mrtg - as I'm running snmp, so I could just monitor it from a desktop > running mrtg... > > Any other suggestions? I have two for you: NetMRG and Cacti You can set them up to read values from pf for example :) -- Joao Barros