Date: Mon, 18 Dec 2006 12:59:13 -0700 From: Ed Stover <estover@nativenerds.com> To: Bob Martin <bob@buckhorn.net> Cc: freebsd-isp@freebsd.org Subject: Re: Internet Link Detective Audit Message-ID: <4586F311.8050004@nativenerds.com> In-Reply-To: <453D67C6.4050402@buckhorn.net> References: <20061024000805.GA12810@uncanny.net> <453D5EBE.1050306@mawer.org> <453D67C6.4050402@buckhorn.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Bob Martin wrote: > There is also the old and venerable ntop, in the ports. > > Bob Martin > > Antony Mawer wrote: >> On 24/10/2006 10:08 AM, Edward Elhauge wrote: >> >>> I'm hoping someone on this list can steer me in the right direction >>> towards figuring out what is going on with my internet link. (Or rather >>> the tools to figure it out on my own). >>> >> ... >> >>> >>> What I'd like is a tool running on FreeBSD that will sort IP traffic >>> coming across my Internet interface by: >>> SRC IP, PROTOCOL and PORT >>> DEST IP, PROTOCOL and PORT >>> then give me total KBs passed in that interval. >> >> >> I was recently in a similar situation and went looking for a similar >> tool, and came across "darkstat" in the ports collection: >> >> http://www.freshports.org/net-mgmt/darkstat >> >> While I did find it a bit rough around the edges in terms of some of >> its data display, it gave me a way to monitor and visualise my traffic >> flows and identify the large offenders... >> >> In my case it turned out an OS X machine was set to automatically >> download system updates, but because no one had applied them yet, it >> was re-downloading them every day... :-) >> >> Hope it helps! >> >> -- Antony >> I know this is a old post but no one covered iftop and trafshow . The combination of those two has helped me track bad bandwidth "leaks" for a while now.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4586F311.8050004>