From owner-freebsd-isp@FreeBSD.ORG Thu May 15 02:57:41 2003 Return-Path: Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0A33537B401 for ; Thu, 15 May 2003 02:57:41 -0700 (PDT) Received: from web1.subnetmask.net (web1.subnetmask.net [207.44.145.30]) by mx1.FreeBSD.org (Postfix) with SMTP id 3364443F85 for ; Thu, 15 May 2003 02:57:40 -0700 (PDT) (envelope-from freebsd@psyxakias.com) Received: (qmail 11017 invoked from network); 15 May 2003 09:57:38 -0000 Received: from athe535-a001.otenet.gr (HELO computer) (62.103.188.1) by web1.subnetmask.net with SMTP; 15 May 2003 09:57:38 -0000 Message-ID: <003e01c31ac8$69b55a20$162ea8c0@computer> From: "PsYxAkIaS (FreeBSD)" To: "Allan Jude" <937863@primus.ca> References: Date: Thu, 15 May 2003 12:57:31 +0300 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 cc: freebsd-isp@freebsd.org Subject: Re: Network Statistics X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 May 2003 09:57:41 -0000 Ipband seems good but i think i didnt explain what i want. I want to see statistics like this: Currently usage: 10.10.10.1 = 400 kbps 10.10.10.2 = 4 kbps 10.10.10.3 = 11 kbps 10.10.10.4 = 15 kbps 10.10.10.5 = 41 kbps 10.10.10.6 = 38 kbps 10.10.10.7 = 10 kbps 10.10.10.8 = 6540 kbps so in that case i would block my local ip (10.10.10.8) that used so much bandwidth. Anyone know a util like that? ----- Original Message ----- From: "Allan Jude" <937863@primus.ca> To: "'PsYxAkIaS (FreeBSD)'" Cc: Sent: Wednesday, May 14, 2003 6:46 PM Subject: RE: Network Statistics > Ipband > > It's in the ports tree, it is ment to email you whenever any of your ips > goes over a set limit (300kb/sec) > You can change a bit of code to make it install firewall rules rather > than email you > > > -----Original Message----- > From: owner-freebsd-isp@freebsd.org > [mailto:owner-freebsd-isp@freebsd.org] On Behalf Of PsYxAkIaS (FreeBSD) > Sent: Wednesday, May 14, 2003 7:46 AM > To: freebsd-isp@freebsd.org > Subject: Network Statistics > > > Hey all > > I am currently using tcpstat to check if I am getting attacked, tcpdump > to trace the ips and what type of attack and ipfw firewall to block > them. Sometimes trafshow too but on big attacks trafshow isnt helpful. > > 1. Do you have any other utils than tcpdump to suggest ? > > 2. I was thinking to make a script to auto-block (via ipfw firewall) any > ip that spends 300 kb/sec for more than 1 minute. Do you know any tools > that may show me which of my ips are getting more than 300 kb/sec? I > hope you got my point > > > Best Regards > _______________________________________________ > freebsd-isp@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-isp > To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org" >