ok .. a use iptraf, but iptraf show my evry connection from computerX:
84.135.15.81:4899 >
163 7940 --A- eth0 ?
82.77.210.7:3475 >
212 323323 -PA- eth0 ?
62.231.96.133:80 >
163 7880 --A- eth0 ?
82.77.210.7:3479 >
212 117268 -PA- eth0 ?
i need an utility that showme total trafic made by 1 computer at moment t;
82.77.210.4 ... 125 kbps;
82.77.210.7 ... 128kbps ..etc
Thanks
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 have a look at iftop and use the options. It is very simple. But iptraf should also be able to do what you want. Am Montag, 22. November 2004 12:49 schrieb Gogu Ionut:> ok .. a use iptraf, but iptraf show my evry connection from computerX: > > 84.135.15.81:4899 > > 163 7940 --A- eth0 ? 82.77.210.7:3475 > > 212 > 323323 -PA- eth0 ? > > 62.231.96.133:80 > > 163 7880 --A- eth0 ? 82.77.210.7:3479 > > 212 > 117268 -PA- eth0 ? > > > i need an utility that showme total trafic made by 1 computer at moment t; > > 82.77.210.4 ... 125 kbps; > 82.77.210.7 ... 128kbps ..etc > > Thanks- -- Dr. Michael Schwartzkopff MultiNET Services GmbH Bretonischer Ring 7 85630 Grasbrunn Tel: (+49 89) 456 911 - 0 Fax: (+49 89) 456 911 - 21 mob: (+49 174) 343 28 75 PGP Fingerprint: F919 3919 FF12 ED5A 2801 DEA6 AA77 57A4 EDD8 979B -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFBodQKqndXpO3Yl5sRAkMoAKCGT0yRAsROB8tn9m7wvGrZyJKRVQCgszWB EnzT9OuA6KoHh8CrMyG7W6Y=3gfG -----END PGP SIGNATURE----- _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
hmmm ... i don''t really know if i should classify this as real time, but i''ll go ahead. depends how much of your real time are u going to spend on it. background: following multiple papers@web first i started parsing whetever tool''s output came in my hand e.g. ifconfig and so on, than i upgraded to ipchains/later on iptables accounting. (e.g create 2 chains, jump dst / src from ips to be monitored, querry the chain). still no satisfaction. than iptraf and friends. [and i even parsed human readable output to rrdtool''s rrds.] still no satisfaction. this is not realtime. (or realtime = very complex for me?) following cisco''s NetFlow implementations @ linux i came across multiple tools that would do similar things to ip flow export in cisco routers. none until couple of months guaranteed my satisfaction. i mean softflowd (disliked promiscuous mode), fprobe/ulogd-probe (too harsh combination of ulogd targets and network traffic sampling) and so on. even ntop. so i would recommend strongly using <<ipcad>> daemon to implement network traffic sampling and NetFlow export; flow-tools to capture NetFlow dataflow and analyze. and this is real time by all means traffic monitoring.not just 100kbps on this target, but 10 packets there, 200 bits there, when, where, all beeing agregated and transformed to feed one''s joy to handle numbers. lots. have phun. NightInTheCity _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/