Date: Thu, 15 May 2003 12:57:31 +0300 From: "PsYxAkIaS (FreeBSD)" <freebsd@psyxakias.com> To: "Allan Jude" <937863@primus.ca> Cc: freebsd-isp@freebsd.org Subject: Re: Network Statistics Message-ID: <003e01c31ac8$69b55a20$162ea8c0@computer> References: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA4RatOouMvEOzXXL4aXw9/cKAAAAQAAAANJQ2dg0JSE6o%2BCBzvOtrqQEAAAAA@primus.ca>
next in thread | previous in thread | raw e-mail | index | archive | help
Ipband seems good but i think i didnt explain what i want. I want to see statistics like this: Currently usage: 10.10.10.1 = 400 kbps 10.10.10.2 = 4 kbps 10.10.10.3 = 11 kbps 10.10.10.4 = 15 kbps 10.10.10.5 = 41 kbps 10.10.10.6 = 38 kbps 10.10.10.7 = 10 kbps 10.10.10.8 = 6540 kbps so in that case i would block my local ip (10.10.10.8) that used so much bandwidth. Anyone know a util like that? ----- Original Message ----- From: "Allan Jude" <937863@primus.ca> To: "'PsYxAkIaS (FreeBSD)'" <freebsd@psyxakias.com> Cc: <freebsd-isp@freebsd.org> Sent: Wednesday, May 14, 2003 6:46 PM Subject: RE: Network Statistics > Ipband > > It's in the ports tree, it is ment to email you whenever any of your ips > goes over a set limit (300kb/sec) > You can change a bit of code to make it install firewall rules rather > than email you > > > -----Original Message----- > From: owner-freebsd-isp@freebsd.org > [mailto:owner-freebsd-isp@freebsd.org] On Behalf Of PsYxAkIaS (FreeBSD) > Sent: Wednesday, May 14, 2003 7:46 AM > To: freebsd-isp@freebsd.org > Subject: Network Statistics > > > Hey all > > I am currently using tcpstat to check if I am getting attacked, tcpdump > to trace the ips and what type of attack and ipfw firewall to block > them. Sometimes trafshow too but on big attacks trafshow isnt helpful. > > 1. Do you have any other utils than tcpdump to suggest ? > > 2. I was thinking to make a script to auto-block (via ipfw firewall) any > ip that spends 300 kb/sec for more than 1 minute. Do you know any tools > that may show me which of my ips are getting more than 300 kb/sec? I > hope you got my point > > > Best Regards > _______________________________________________ > freebsd-isp@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-isp > To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org" >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?003e01c31ac8$69b55a20$162ea8c0>