From owner-freebsd-net@FreeBSD.ORG Thu Jul 31 11:19:24 2008 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4D3C9106566C for ; Thu, 31 Jul 2008 11:19:24 +0000 (UTC) (envelope-from lstewart@room52.net) Received: from outbound.icp-qv1-irony-out2.iinet.net.au (outbound.icp-qv1-irony-out2.iinet.net.au [203.59.1.107]) by mx1.freebsd.org (Postfix) with ESMTP id BEB698FC12 for ; Thu, 31 Jul 2008 11:19:23 +0000 (UTC) (envelope-from lstewart@room52.net) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApsEAFY1kUh8qG0B/2dsb2JhbACLHqYq X-IronPort-AV: E=Sophos;i="4.31,285,1215360000"; d="scan'208";a="348552249" Received: from unknown (HELO lawrence1.loshell.room52.net) ([124.168.109.1]) by outbound.icp-qv1-irony-out2.iinet.net.au with ESMTP; 31 Jul 2008 18:49:43 +0800 Message-ID: <489198C6.9060409@room52.net> Date: Thu, 31 Jul 2008 20:49:42 +1000 From: Lawrence Stewart User-Agent: Thunderbird 2.0.0.14 (X11/20080703) MIME-Version: 1.0 To: Mike Makonnen References: <48918DB5.7020201@wubethiopia.com> In-Reply-To: <48918DB5.7020201@wubethiopia.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-net@freebsd.org Subject: Re: Application layer classifier for ipfw X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 Jul 2008 11:19:24 -0000 Hi Mike, Mike Makonnen wrote: [snip] > sharing applications which were hogging all the bandwidth. I looked for > programs that would allow me to shape traffic according to the > application layer protocol, but couldn't find any for FreeBSD. I found a > couple: l7-filter and ipp2p, but these are Linux specific. So, I decided > to write one. The result is ipfw-classifyd : > http://people.freebsd.org/~mtm/ipfw-classifyd.tar.bz2 [snip] Unfortunately, I suspect you should have looked a bit harder: Bro (http://www.bro-ids.org/) or Snort (http://www.snort.org/), both of which are in the FreeBSD ports tree, would have saved you from reinventing the wheel. Cheers, Lawrence