From owner-freebsd-isp@FreeBSD.ORG Mon Jul 19 15:01:57 2004 Return-Path: Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 063F716A4CE for ; Mon, 19 Jul 2004 15:01:56 +0000 (GMT) Received: from otter3.centtech.com (moat3.centtech.com [207.200.51.50]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6F66943D53 for ; Mon, 19 Jul 2004 15:01:56 +0000 (GMT) (envelope-from anderson@centtech.com) Received: from [10.177.171.220] (neutrino.centtech.com [10.177.171.220]) by otter3.centtech.com (8.12.3/8.12.3) with ESMTP id i6JF1kE8062489; Mon, 19 Jul 2004 10:01:46 -0500 (CDT) (envelope-from anderson@centtech.com) Message-ID: <40FBE24B.1080406@centtech.com> Date: Mon, 19 Jul 2004 10:01:31 -0500 From: Eric Anderson User-Agent: Mozilla Thunderbird 0.7.1 (X11/20040707) X-Accept-Language: en-us, en MIME-Version: 1.0 To: spidey@act.co.za References: <000a01c46d9f$c81d5650$0b01000a@SPIDEY> In-Reply-To: <000a01c46d9f$c81d5650$0b01000a@SPIDEY> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-isp@freebsd.org Subject: Re: Traffic Monitor X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Jul 2004 15:01:57 -0000 Spidey Knepscheld wrote: >Hi > >I am an ISP running FreeBSD as a firewall and as a Mail Server. My >problem is that I am not able to monitor the amount of traffic that user >are using on my network. > >My network looks like this: My Link comes in on a Cisco 805 from the >router it goes to the first NIC on the Firewall from the second NIC it >runs into a Cisco Catalyst and then to the network.On the catalyst I >mirrored the data coming from the network to the Firewall to one port >and I have a FreeBSD box on that port just to monitor the traffic. > >What I am looking for is some app that could show me live what ip on my >network is utilizing what part of the bandwidth.I know there are a >million apps available but I need to see from IP ???? to IP ???? ???? >kb/s and then see how much of the 256k is still available. Don't laugh >!!I have a 256k Diginet connection and I would like to see who is >killing my network. I do get live graphs from my upstream supplier but >it shows the line utilization from my router and not who is using what. > >So I can't be proactive in solving speed issues I need to wait for it to >happen and then by a process of elimination disconnect segments of the >network and see when the graph drops. > > Check out ports/net/trafshow or ports/net-mgmt/iftop I think one of those might be what you want.. Eric -- ------------------------------------------------------------------ Eric Anderson Sr. Systems Administrator Centaur Technology Talk sense to a fool and he calls you foolish. ------------------------------------------------------------------