From owner-freebsd-questions@FreeBSD.ORG Tue Sep 6 15:59:17 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CDC2416A41F for ; Tue, 6 Sep 2005 15:59:17 +0000 (GMT) (envelope-from glenn@antimatter.net) Received: from cobalt.antimatter.net (cobalt.antimatter.net [69.55.224.239]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5995F43D48 for ; Tue, 6 Sep 2005 15:59:17 +0000 (GMT) (envelope-from glenn@antimatter.net) Received: from glenn-mobile.antimatter.net (cpe-66-27-86-22.san.res.rr.com [66.27.86.22]) (authenticated bits=0) by cobalt.antimatter.net (8.13.4/8.13.4) with ESMTP id j86FxGk3001644 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 6 Sep 2005 08:59:16 -0700 X-MailKey: purple frogs are falling from the sky Message-Id: <6.2.3.4.2.20050906084932.025b36d0@cobalt.antimatter.net> X-Mailer: QUALCOMM Windows Eudora Version 6.2.3.4 Date: Tue, 06 Sep 2005 08:58:52 -0700 To: Grant Peel , From: Glenn Dawson In-Reply-To: <007201c5b2e2$248a17b0$6501a8c0@GRANT> References: <007201c5b2e2$248a17b0$6501a8c0@GRANT> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Cc: Subject: Re: IPFW counters. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Sep 2005 15:59:17 -0000 At 05:54 AM 9/6/2005, Grant Peel wrote: >Hi all, > >I am in the midst of setting up bandwidth monitoring for all my >domains and IPs. To do this I will be using IPFW counter rules and ipa. > >Question: I have about 250 domains on each box. to monitor all of >them, I would need to set up over 500 counter rules, how well will >ipfw and freebsd 4.10 and up) handle this? I tried something like that a while back and while I could create the rules just fine, it proved to be very impractical with the amount of traffic I was dealing with. (around 20Mbits/sec) I ended up using netgraph and ng_netflow(4) to export the data to another machine that processed all the data. -Glenn >-GRant > >_______________________________________________ >freebsd-questions@freebsd.org mailing list >http://lists.freebsd.org/mailman/listinfo/freebsd-questions >To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"