From owner-freebsd-questions Sat Jan 25 8: 6:48 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7B7C637B401 for ; Sat, 25 Jan 2003 08:06:47 -0800 (PST) Received: from samson.sentinelchicken.net (h-64-105-205-76.CMBRMAOR.covad.net [64.105.205.76]) by mx1.FreeBSD.org (Postfix) with SMTP id 7FCA343E4A for ; Sat, 25 Jan 2003 08:06:46 -0800 (PST) (envelope-from jwm@sentinelchicken.net) Received: (qmail 7772 invoked by uid 1000); 25 Jan 2003 16:07:51 -0000 Date: Sat, 25 Jan 2003 11:07:51 -0500 From: Jason Morgan To: freebsd-questions@freebsd.org Subject: monitoring traffic with IPFW - good idea? Message-ID: <20030125160751.GB7622@sentinelchicken.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG I remotely admin a server and am trying to come up with a simple way to monitor traffic. Lately, I have been manually using IPFW's count feature to monitor individual's bandwidth usage. We don't want to restrict any user's usage, we just want to be aware if someone starts trading mp3s, or if our usage comes to a point where we need more bandwidth. We are a small shop (four employees in the office) and we are using a single server for routing, firewall, and website hosting. I was planning on writing a simple script to email me and the boss a "ipfw show" every day. Is this a good way to do it? Will the extra 'count' entries be more of a burden on the system? Please excuse my ignorance. Cheers, Jason To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message