LARTC - Jan 2001 - IMPT!!! - What software to use to gauge if Bandwidth control is working/successful ??

How does one know if the traffic to a machine has indeed being limited to say
64Kbps?

What software are you using to gauge this? Can this software show graphically in
real-time the amount of data to this machine?


Regards.

On Thu, Jan 11, 2001 at 03:48:59PM +0000, Stefan Harinko
wrote:
> Hi,
> 
> my school now has a leased ISDN line. In a few weeks we will get an
> addisional ADSL connection. We want to use load balancing.
> But I need some examples, because I have no idea how it could work :)
There is a bit in the HOWTO on this, you should read it. It mentions some of
the limitations of loadbalancing. A lot depends on the configuration.
Understand the problems with packet reordering, egress filtering etc etc.

REgards,

bert hubert



-- 
PowerDNS                     Versatile DNS Services  
Trilab                       The Technology People   
''SYN! .. SYN|ACK! .. ACK!'' - the mating call of the internet

On Thu, Jan 11, 2001 at 10:38:15PM +0800, Rick Goh Siow Mong
wrote:
> How does one know if the traffic to a machine has indeed being limited to
say 64Kbps?
> 
> What software are you using to gauge this? Can this software show
graphically in real-time the amount of data to this machine?
''iptraf'' is very good for ''now''
measurements. ''mrtg'' takes 5 minute
averages, which is also very useful.

-- 
PowerDNS                     Versatile DNS Services  
Trilab                       The Technology People   
''SYN! .. SYN|ACK! .. ACK!'' - the mating call of the internet

Hi,

my school now has a leased ISDN line. In a few weeks we will get an
addisional ADSL connection. We want to use load balancing.
But I need some examples, because I have no idea how it could work :)

Thank you for your help.

--
MfG Stefan Harinko

bert hubert wrote:
> On Thu, Jan 11, 2001 at 10:38:15PM +0800, Rick Goh Siow Mong wrote:
> 
>> How does one know if the traffic to a machine has indeed being limited
to say 64Kbps?
>> 
>> What software are you using to gauge this? Can this software show
graphically in real-time the amount of data to this machine?
> 
> 
> ''iptraf'' is very good for ''now''
measurements. ''mrtg'' takes 5 minute
> averages, which is also very useful.
Bert,
MRTG works with SNMP to get traffic statistics from remote routers.
How did you get SNMP to work on a Linux box? Have you already used MRTG 
to monitor linux routers?

(for those unfamiliar with SNMP: SNMP is short for Simple Network 
Management Protocol, an IETF standardised protocol, widely used by
ISP''s
and enterprises for monitoring and managing their IP networks. It is 
invented for managing large networks, so it is actually of no use for 
the home user.)

Regards,
Guy

On Thu, Jan 11, 2001 at 07:34:46PM +0100, Guy Van Den Bergh wrote:
> MRTG works with SNMP to get traffic statistics from remote routers.
> How did you get SNMP to work on a Linux box? Have you already used MRTG 
> to monitor linux routers?
Yes. You can install an snmp daemon on your Linux box, which will make it
respond to snmp commands a router would respond to as well. I don''t
like
this approach because my 8MB 486 router didn''t have enough memory to
run an
snmp daemon concurrently with mrtg.

The second way, which I like a lot better, is to have mrtg call an external
program which then creates the right numbers. Very easy to do:

 export PATH=$PATH:/usr/sbin
 ipchains -vx -L output | grep $1 | cut -b 9-19
 ipchains -vx -L input | grep $1 | cut -b 9-19
 uptime
 echo $1-router

This creates output mrtg can understand.

Regards,

bert hubert

-- 
PowerDNS                     Versatile DNS Services  
Trilab                       The Technology People   
''SYN! .. SYN|ACK! .. ACK!'' - the mating call of the internet

I have tried IPCHAINS IP Accounting.

However, the amount of traffic as accounted for by IPCHAINS for the amount
of bandwidth going through the ports of my linux box, is not accurate at
all. In fact, the number is completely off!

Could u send me your ipchains scripts? thanks in advance.

*******************************************
Below is what i did, which give me the wrong figures. Am I missing something
here??

In rc.firewall, i added the following lines:

# To accept traf-stats for MRTG
/sbin/ipchains -N web
/sbin/ipchains -A web -j ACCEPT
/sbin/ipchains -N ftp
/sbin/ipchains -A ftp -j ACCEPT
/sbin/ipchains -N dns
/sbin/ipchains -A dns -j ACCEPT
/sbin/ipchains -N telnet
/sbin/ipchains -A telnet -j ACCEPT
/sbin/ipchains -A input -p tcp --dport www -j web
/sbin/ipchains -A output -p tcp --sport www -j web
/sbin/ipchains -A input -p udp --dport www -j web
/sbin/ipchains -A output -p udp --sport www -j web
/sbin/ipchains -A input -p tcp --dport ftp -j ftp
/sbin/ipchains -A output -p tcp --sport ftp -j ftp
/sbin/ipchains -A input -p tcp --dport domain -j dns
/sbin/ipchains -A output -p tcp --sport domain -j dns
/sbin/ipchains -A input -p udp --dport domain -j dns
/sbin/ipchains -A output -p udp --sport domain -j dns
/sbin/ipchains -A input -p tcp --dport telnet -j telnet
/sbin/ipchains -A output -p tcp --sport telnet -j telnet


traffic.sh  -->  the script to be run under MRTG.

#!/bin/sh
#Courtesy of xidus.net.
statname=$1
uptime=unused
stat=`cat /proc/net/ip_fwchains | grep $statname | tail -1 | awk
''{print
$10}''`
echo $stat
echo $stat
echo $statname
echo $uptime

On Fri, Jan 12, 2001 at 09:31:32PM +0800, Rick Goh Siow Mong
wrote:
> I have tried IPCHAINS IP Accounting.
> 
> However, the amount of traffic as accounted for by IPCHAINS for the amount
> of bandwidth going through the ports of my linux box, is not accurate at
> all. In fact, the number is completely off!
I suspect that you will find that it works perfectly. However, MRTG can be
misconfigured. MRTG expects either ''absolute'',
''direct'' or ''gauge'' data.
Investige if you are supplying it with the right data.

Regards,

bert hubert

-- 
PowerDNS                     Versatile DNS Services  
Trilab                       The Technology People   
''SYN! .. SYN|ACK! .. ACK!'' - the mating call of the internet

Is this correct?

# trafstat.sh is available at http://mrtg.xidus.net/run/trafstat.sh
# returns byte counters based on ipchains stats
# see the script for more info on the setup
Target[traf-web]: `/www/mrtg/run/trafstat.sh web`
Options[traf-web]: nopercent,growright,noinfo
Title[traf-web]: Web traffic
PageTop[traf-web]: <h1>Web traffic</h1>
MaxBytes[traf-web]: 1000000
YLegend[traf-web]: Bytes/s
ShortLegend[traf-web]: B/s
LegendI[traf-web]: &nbsp;Traffic
LegendO[traf-web]:
Legend1[traf-web]: Traffic in Bytes per Second

On Fri, Jan 12, 2001 at 10:57:35PM +0800, Rick Goh Siow Mong
wrote:
> Is this correct?
Well, I''m not your personal helpdesk, I would advice truly
understanding
MRTG. But, at a guess, add ''gauge'' to Options. You probably
see ever growing
bandwidth usage now.

Regards,

bert hubert

-- 
PowerDNS                     Versatile DNS Services  
Trilab                       The Technology People   
''SYN! .. SYN|ACK! .. ACK!'' - the mating call of the internet

Hi bert,
> There is a bit in the HOWTO on this, you should read it. It mentions some
of
> the limitations of loadbalancing. A lot depends on the configuration.
> Understand the problems with packet reordering, egress filtering etc etc.
Thank you.
I had some "old" HOWTO. There was nothin about loadbalancing over
multiple devices.


--
MfG Stefan Harinko