Re: Packet counting/auditing per IP

Simon Hobson
Thu, 18 Jan 2007 23:44:27 -0000

>I handle various subents and IP''s for various clients, and they all
>go through the shorewall firewall system.
>
>Some clients have subnets, some have only single IP''s.
>
>I''d like to start counting the bandwidth they are using, whether
>that be for subnets or IP''s on their dedicated servers.
>
>Can shorewall do this? if so, how? will I need to upgrade the
>shorewall version?

Yes it can, I have two such setups at work doing just this - one was
installed purely to do this. Add a bit of scripting and rrdtool and
you can have some very useful graphs.

IIRC there is a page on the Shorewall site covering accounting,
however, it isn''t that clear (or it wasn''t when I first set
this up)
about configuring accounting for lots of IPs.

I''m busy tomorrow at work, but I''ll try and post a bit more
about our
setup later.