I have an office setup with shorewall and when there''s bandwidth problems, I''d like to know who''s hogging my bandwidth and how (port). What would be the best approach to have shorewall show me something like: IP | Port | Bytes In | Bytes Out I have 20 PCs connected via DHCP. I looked at the documentation and thought that accounting may be close, but accounting requires you, it seems, to specify the IP and Port for everything you want to track. I don''t mind typing 20 IP addresses, but I don''t want to specify different entries for all the ports (major and minor). Aaron
Aaron O''Hara wrote:> > I looked at the documentation and thought that accounting may be close, > but accounting requires you, it seems, to specify the IP and Port for > everything you want to track. I don''t mind typing 20 IP addresses, but > I don''t want to specify different entries for all the ports (major and > minor).Shorewall accounting (or any form of iptables-based accounting) is not what you need because of the need for manual configuration (as you''ve mentioned). I''ve heard that ''ntop'' is good for this sort of thing but I haven''t had a chance to play with it. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
I use ntop for this sort of thing. You can run it as a deamon and use the web interface, or if you dont want a deamon running all the time, just run intop command on a console when you notice the bandwith problem and want a quick look at who is using what. eather way it is a fery helpfull tool. On Fri, 18 Mar 2005 13:54:49 -0800, Aaron O''Hara <ajeo@hungryforlife.org> wrote:> I have an office setup with shorewall and when there''s bandwidth > problems, I''d like to know who''s hogging my bandwidth and how (port). > What would be the best approach to have shorewall show me something > like: > > IP | Port | Bytes In | Bytes Out > > I have 20 PCs connected via DHCP. > > I looked at the documentation and thought that accounting may be close, > but accounting requires you, it seems, to specify the IP and Port for > everything you want to track. I don''t mind typing 20 IP addresses, but > I don''t want to specify different entries for all the ports (major and > minor). > > Aaron > > _______________________________________________ > Shorewall-users mailing list > Post: Shorewall-users@lists.shorewall.net > Subscribe/Unsubscribe: https://lists.shorewall.net/mailman/listinfo/shorewall-users > Support: http://www.shorewall.net/support.htm > FAQ: http://www.shorewall.net/FAQ.htm >
Dear all I''d like to suggest, for real time bandwidth monitoring, IFTOP (http://www.ex-parrot.com/~pdw/iftop/). It''s very similar to TOP (to see running processes) but it''s for NETWORK INTERFACE TRAFFIC. You can see all current connections and how much traffic each one is consuming and you only need console access (curses) at Linux/Unix box. -Guilsson On Sat, 19 Mar 2005 11:57:03 -0600, Tildar <tildar@gmail.com> wrote:> I use ntop for this sort of thing. > You can run it as a deamon and use the web interface, or if you dont > want a deamon running all the time, just run intop command on a > console when you notice the bandwith problem and want a quick look at > who is using what. eather way it is a fery helpfull tool. > > > On Fri, 18 Mar 2005 13:54:49 -0800, Aaron O''Hara <ajeo@hungryforlife.org> wrote: > > I have an office setup with shorewall and when there''s bandwidth > > problems, I''d like to know who''s hogging my bandwidth and how (port). > > What would be the best approach to have shorewall show me something > > like: > > > > IP | Port | Bytes In | Bytes Out > > > > I have 20 PCs connected via DHCP. > > > > I looked at the documentation and thought that accounting may be close, > > but accounting requires you, it seems, to specify the IP and Port for > > everything you want to track. I don''t mind typing 20 IP addresses, but > > I don''t want to specify different entries for all the ports (major and > > minor). > > > > Aaron > > > > _______________________________________________ > > Shorewall-users mailing list > > Post: Shorewall-users@lists.shorewall.net > > Subscribe/Unsubscribe: https://lists.shorewall.net/mailman/listinfo/shorewall-users > > Support: http://www.shorewall.net/support.htm > > FAQ: http://www.shorewall.net/FAQ.htm > > > _______________________________________________ > Shorewall-users mailing list > Post: Shorewall-users@lists.shorewall.net > Subscribe/Unsubscribe: https://lists.shorewall.net/mailman/listinfo/shorewall-users > Support: http://www.shorewall.net/support.htm > FAQ: http://www.shorewall.net/FAQ.htm >