Date: Sat, 25 Jan 2003 17:46:28 +0100 (MET) From: Frank Reppin <shauwn@relay.boerde.de> To: Jason Morgan <jwm-freebsd@sentinelchicken.net> Cc: freebsd-questions@freebsd.org Subject: Re: monitoring traffic with IPFW - good idea? Message-ID: <Pine.LNX.4.44.0301251734180.795-100000@relay.boerde.de> In-Reply-To: <20030125160751.GB7622@sentinelchicken.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, 25 Jan 2003, Jason Morgan wrote: Hi, yes - why not. I do the same here on our net with IPFW count rules. In this way I divided those rules to monitor different subnets, protocols and I also monitor the bandwidth usage for some services. All this informations gets then piped through MRTG (www.mrtg.org) and produces some nice graphs - showing the used bandwidth. On the other hand it might be enough for you, if you only see what actually happened by watching the rules manually - in other words - get the output mailed from time to time. Maybe someone has a clue, if a lot of count rules (I mean really lots of them) have any 'bad' side effects on performance. So far I don't see problems with around 80 rules on PII400/128MB counting traffic from/to upstream (2.3Mbit/s) via 100MBit/s interfaces in this box. I think of doing accounting here for a /22 net (atm this is done by a linux box with ipac). Best regards, Frank Reppin -- Heidestr. 15 39112 Magdeburg Germany To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.4.44.0301251734180.795-100000>