Date: Tue, 11 Jun 2002 09:32:32 +0200 From: "Patrick O'Reilly" <bsd@perimeter.co.za> To: "Robbak" <robbak@comnorth.com.au>, <freebsd-questions@FreeBSD.ORG> Subject: Re: Developing an ip accounting program. Message-ID: <002e01c2111a$274dfec0$b50d030a@PATRICK> References: <02061110220000.00351@swegg>
next in thread | previous in thread | raw e-mail | index | archive | help
----- Original Message -----
From: "Robbak" <robbak@comnorth.com.au>
> OK. I've drawn a blank.
>
> I previoulsy mentioned that I would do this from firewall logs. that
was before
> I determined that they do not log packet size.
>
> What I need to do is provide to users a .html page listing the data
throughput
> (to/from) the machines on the local subnet. I envisage a routine
providing a
> stream of data (similar to the ipfw logging) that the procedure could
parse and
> summarise by ip, and a script/program in cgi to extract the info and
create the
> page.
>
> I beleive could accomplish the later steps, if I could get some help
on the
> data input. The BPF routines look capable, but are beyond my
comprehension.
>
> The nearest I have seen is the ipcad program. It sems to have much of
the info I
> need. If someone has an annotated version of the code for it, or a
similar
> prog., it would be a great help
>
Robert,
I seem to recall seeing someone using 'ntop' from the ports to monitor
network activity on a gateway. I'm pretty sure it included byte counts
per host, even with a break-down by protocol (HTTP vs SMTP, etc), and it
has a web interface.
Regards,
Patrick O'Reilly.
___ _ __
/ _ )__ __ (_)_ __ ___ _/ /____ __
/ __/ -_) _) / ~ ) -_), ,-/ -_) _)
/_/ \__/_//_/_/~/_/\__/ \__/\__/_/
http://www.perimeter.co.za
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?002e01c2111a$274dfec0$b50d030a>