Hi, is there any way to monitor bandwidth usage in my shorewall that have 3 different ISP. Now I am using iptraf, but I would like to know WHO is using my bandwidth. Is that possible? Really thanks ------------------------------------------------------------------------------ ThinkGeek and WIRED''s GeekDad team up for the Ultimate GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo
Nico Pagliaro wrote:> Hi, is there any way to monitor bandwidth usage in my shorewall that > have 3 different ISP. Now I am using iptraf, but I would like to know > WHO is using my bandwidth. Is that possible?For real time bw monitoring I use iftop, you can bind it to any network interface, something like this: iftop -i eth0 Check the screenshots in my howto: http://tuxjm.net/docs/Configuracion_Firewall_Shorewall_de_dos_interfaces_con_NAT_en_Ubuntu_Server/#id418985 Another good option is ntop, you can get more graphs and info, and historical statistics, I recomend to disable codecs so is not that memory hungry. Also, you can check vnstat if you are interested in total bw consuption by day, week, month. Best regards.> > Really thanks > ------------------------------------------------------------------------ > > ------------------------------------------------------------------------------ > ThinkGeek and WIRED''s GeekDad team up for the Ultimate > GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the > lucky parental unit. See the prize list and enter to win: > http://p.sf.net/sfu/thinkgeek-promo > ------------------------------------------------------------------------ > > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users >-- Jorge Armando Medina Computación Gráfica de México Web: http://www.e-compugraf.com Tel: 55 51 40 72, Ext: 124 Email: jmedina@e-compugraf.com GPG Key: 1024D/28E40632 2007-07-26 GPG Fingerprint: 59E2 0C7C F128 B550 B3A6 D3AF C574 8422 28E4 0632 ------------------------------------------------------------------------------ ThinkGeek and WIRED''s GeekDad team up for the Ultimate GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo
On 6/17/10 11:14 AM, Nico Pagliaro wrote:> Hi, is there any way to monitor bandwidth usage in my shorewall that > have 3 different ISP. Now I am using iptraf, but I would like to know > WHO is using my bandwidth. Is that possible?Install ntop. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ ThinkGeek and WIRED''s GeekDad team up for the Ultimate GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo
Jorge, como puede hacer para saber quien o que usuario es el que esta consumiendo el trafico? How do I know wich user is using my bandwidth? Gracias - thanks 2010/6/17 Jorge Armando Medina <jmedina@e-compugraf.com>> > > Nico Pagliaro wrote: > > Hi, is there any way to monitor bandwidth usage in my shorewall that > > have 3 different ISP. Now I am using iptraf, but I would like to know > > WHO is using my bandwidth. Is that possible? > For real time bw monitoring I use iftop, you can bind it to any network > interface, something like this: > > iftop -i eth0 > > Check the screenshots in my howto: > > http://tuxjm.net/docs/Configuracion_Firewall_Shorewall_de_dos_interfaces_con_NAT_en_Ubuntu_Server/#id418985 > > Another good option is ntop, you can get more graphs and info, and > historical statistics, I recomend to disable codecs so is not that > memory hungry. > > Also, you can check vnstat if you are interested in total bw consuption > by day, week, month. > > Best regards. > > > > Really thanks > > ------------------------------------------------------------------------ > > > > > ------------------------------------------------------------------------------ > > ThinkGeek and WIRED''s GeekDad team up for the Ultimate > > GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the > > lucky parental unit. See the prize list and enter to win: > > http://p.sf.net/sfu/thinkgeek-promo > > ------------------------------------------------------------------------ > > > > _______________________________________________ > > Shorewall-users mailing list > > Shorewall-users@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/shorewall-users > > > > > -- > Jorge Armando Medina > Computación Gráfica de México > Web: http://www.e-compugraf.com > Tel: 55 51 40 72, Ext: 124 > Email: jmedina@e-compugraf.com > GPG Key: 1024D/28E40632 2007-07-26 > GPG Fingerprint: 59E2 0C7C F128 B550 B3A6 D3AF C574 8422 28E4 0632 > > > > > ------------------------------------------------------------------------------ > ThinkGeek and WIRED''s GeekDad team up for the Ultimate > GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the > lucky parental unit. See the prize list and enter to win: > http://p.sf.net/sfu/thinkgeek-promo > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users > >------------------------------------------------------------------------------ ThinkGeek and WIRED''s GeekDad team up for the Ultimate GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo
iptraf shows you the IP addresses using your bandwidth, what more do you need than that? You may want to map IP addresses to easy to identify DNS names to get a better view of the specific user. Some other command line tools, similar to iptraf: dnstop iftop pktstat ntop iptraf ifstatus jnettop But, all of these are only going to show by IP. I think it''s up to you to know what IP belongs to what user. At a former place I worked, I handed out static IPs via DHCP. Along with that, everyone got a DNS name that I know who it belonged to. Then via, iptraf, I could easily see who was using what. We had less that 100 users, so it wasn''t to much to keep up with, if you have more users it gets harder as the number of users goes up. bb On Thu, Jun 17, 2010 at 1:14 PM, Nico Pagliaro <nicopag@gmail.com> wrote:> Hi, is there any way to monitor bandwidth usage in my shorewall that have 3 > different ISP. Now I am using iptraf, but I would like to know WHO is using > my bandwidth. Is that possible? > > Really thanks > > ------------------------------------------------------------------------------ > ThinkGeek and WIRED''s GeekDad team up for the Ultimate > GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the > lucky parental unit. See the prize list and enter to win: > http://p.sf.net/sfu/thinkgeek-promo > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users > >-- Have Mercy & Say Yeah ------------------------------------------------------------------------------ ThinkGeek and WIRED''s GeekDad team up for the Ultimate GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo
Brad, in iptraf, where can you see the internal ip which is consuming bandwidth? I cant find that option.. I can monitor traffic between my extranal ip and the destination, but not which internal ip. Thanks and sorry about my question. Perhaps I can write you out if this forum because we are talking about iptraf and no shorewall :( On Thu, Jun 17, 2010 at 4:00 PM, Brad Bendily <bendily@gmail.com> wrote:> iptraf shows you the IP addresses using your bandwidth, what more do > you need than that? > You may want to map IP addresses to easy to identify DNS names to get > a better view of the > specific user. > Some other command line tools, similar to iptraf: > dnstop > iftop > pktstat > ntop > iptraf > ifstatus > jnettop > > But, all of these are only going to show by IP. I think it''s up to you > to know what IP > belongs to what user. > > At a former place I worked, I handed out static IPs via DHCP. Along > with that, everyone > got a DNS name that I know who it belonged to. Then via, iptraf, I could > easily see who was using what. We had less that 100 users, so it wasn''t to > much to keep up with, if you have more users it gets harder as the > number of users goes up. > > bb > > On Thu, Jun 17, 2010 at 1:14 PM, Nico Pagliaro <nicopag@gmail.com> wrote: > > Hi, is there any way to monitor bandwidth usage in my shorewall that have > 3 > > different ISP. Now I am using iptraf, but I would like to know WHO is > using > > my bandwidth. Is that possible? > > > > Really thanks > > > > > ------------------------------------------------------------------------------ > > ThinkGeek and WIRED''s GeekDad team up for the Ultimate > > GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the > > lucky parental unit. See the prize list and enter to win: > > http://p.sf.net/sfu/thinkgeek-promo > > _______________________________________________ > > Shorewall-users mailing list > > Shorewall-users@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/shorewall-users > > > > > > > > -- > Have Mercy & Say Yeah > > > ------------------------------------------------------------------------------ > ThinkGeek and WIRED''s GeekDad team up for the Ultimate > GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the > lucky parental unit. See the prize list and enter to win: > http://p.sf.net/sfu/thinkgeek-promo > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users >------------------------------------------------------------------------------ ThinkGeek and WIRED''s GeekDad team up for the Ultimate GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo
Well, iptraf is more of a real time thing, so you''d have to be watching it at the moment you suspect a problem. But, by default, iptraf sorts the traffic by the most used. Also, instead of watching the outside interface, you may have to watch the inside interface to see the specific IP address causing problems. I was looking at the vnstat page, that''s pretty cool. Won''t show use by specific IP, but shows overall usage, which could be helpful. There was a link on that page to something else called "darkstat". Looking at the darkstat page (http://dmr.ath.cx/net/darkstat/) the second screenshot, shows host/IP address sorted by what looks like total usage. Another one that I forgot to list on my page is called ipaudit. http://ipaudit.sourceforge.net/ It hasn''t been updated in a very long time, but should still work. One of the pieces is a web interface, which gives essentially the same info as the darkstat screen shot above. It shows total/IN/OUT for each IP address source and destination. It''s very handy and since ipaudit runs in the background you get on going stats. Check out the screen shots here: http://ipaudit.sourceforge.net/ipaudit-web/ Found this on google, and installation guide: http://www.symantec.com/connect/articles/introduction-ipaudit After looking at it, darkstat is updated very recently, you might try working with it before using ipaudit. ntop is also very cool and does all the same things, although it''s a lot more overhead and a lot larger footprint than the other two. bb On Thu, Jun 17, 2010 at 2:15 PM, Nico Pagliaro <nicopag@gmail.com> wrote:> Brad, in iptraf, where can you see the internal ip which is consuming > bandwidth? I cant find that option.. I can monitor traffic between my > extranal ip and the destination, but not which internal ip. > > Thanks and sorry about my question. Perhaps I can write you out if this > forum because we are talking about iptraf and no shorewall :( > > > On Thu, Jun 17, 2010 at 4:00 PM, Brad Bendily <bendily@gmail.com> wrote: >> >> iptraf shows you the IP addresses using your bandwidth, what more do >> you need than that? >> You may want to map IP addresses to easy to identify DNS names to get >> a better view of the >> specific user. >> Some other command line tools, similar to iptraf: >> dnstop >> iftop >> pktstat >> ntop >> iptraf >> ifstatus >> jnettop >> >> But, all of these are only going to show by IP. I think it''s up to you >> to know what IP >> belongs to what user. >> >> At a former place I worked, I handed out static IPs via DHCP. Along >> with that, everyone >> got a DNS name that I know who it belonged to. Then via, iptraf, I could >> easily see who was using what. We had less that 100 users, so it wasn''t to >> much to keep up with, if you have more users it gets harder as the >> number of users goes up. >> >> bb >> >> On Thu, Jun 17, 2010 at 1:14 PM, Nico Pagliaro <nicopag@gmail.com> wrote: >> > Hi, is there any way to monitor bandwidth usage in my shorewall that >> > have 3 >> > different ISP. Now I am using iptraf, but I would like to know WHO is >> > using >> > my bandwidth. Is that possible? >> > >> > Really thanks >> > >> > >> > ------------------------------------------------------------------------------ >> > ThinkGeek and WIRED''s GeekDad team up for the Ultimate >> > GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the >> > lucky parental unit. See the prize list and enter to win: >> > http://p.sf.net/sfu/thinkgeek-promo >> > _______________________________________________ >> > Shorewall-users mailing list >> > Shorewall-users@lists.sourceforge.net >> > https://lists.sourceforge.net/lists/listinfo/shorewall-users >> > >> > >> >> >> >> -- >> Have Mercy & Say Yeah >> >> >> ------------------------------------------------------------------------------ >> ThinkGeek and WIRED''s GeekDad team up for the Ultimate >> GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the >> lucky parental unit. See the prize list and enter to win: >> http://p.sf.net/sfu/thinkgeek-promo >> _______________________________________________ >> Shorewall-users mailing list >> Shorewall-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/shorewall-users > > > ------------------------------------------------------------------------------ > ThinkGeek and WIRED''s GeekDad team up for the Ultimate > GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the > lucky parental unit. See the prize list and enter to win: > http://p.sf.net/sfu/thinkgeek-promo > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users > >-- Have Mercy & Say Yeah ------------------------------------------------------------------------------ ThinkGeek and WIRED''s GeekDad team up for the Ultimate GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo
Brad!! WOW, really thanks for you help!! I will try all of this stuff and then I let you know how it goes. Thanks On Thu, Jun 17, 2010 at 5:01 PM, Brad Bendily <bendily@gmail.com> wrote:> Well, iptraf is more of a real time thing, so you''d have to be > watching it at the moment you suspect a problem. > But, by default, iptraf sorts the traffic by the most used. > Also, instead of watching the outside interface, you may have to watch > the inside interface to see the > specific IP address causing problems. > > I was looking at the vnstat page, that''s pretty cool. Won''t show use > by specific IP, but shows overall usage, which > could be helpful. There was a link on that page to something else > called "darkstat". > Looking at the darkstat page (http://dmr.ath.cx/net/darkstat/) the > second screenshot, shows host/IP address > sorted by what looks like total usage. > > Another one that I forgot to list on my page is called ipaudit. > http://ipaudit.sourceforge.net/ > It hasn''t been updated in a very long time, but should still work. > One of the pieces is a web interface, which gives essentially the same > info as the darkstat > screen shot above. It shows total/IN/OUT for each IP address source > and destination. > It''s very handy and since ipaudit runs in the background you get on going > stats. > Check out the screen shots here: > http://ipaudit.sourceforge.net/ipaudit-web/ > > Found this on google, and installation guide: > http://www.symantec.com/connect/articles/introduction-ipaudit > > After looking at it, darkstat is updated very recently, you might try > working with it before using ipaudit. > > ntop is also very cool and does all the same things, although it''s a > lot more overhead and a lot larger footprint > than the other two. > > bb > > > On Thu, Jun 17, 2010 at 2:15 PM, Nico Pagliaro <nicopag@gmail.com> wrote: > > Brad, in iptraf, where can you see the internal ip which is consuming > > bandwidth? I cant find that option.. I can monitor traffic between my > > extranal ip and the destination, but not which internal ip. > > > > Thanks and sorry about my question. Perhaps I can write you out if this > > forum because we are talking about iptraf and no shorewall :( > > > > > > On Thu, Jun 17, 2010 at 4:00 PM, Brad Bendily <bendily@gmail.com> wrote: > >> > >> iptraf shows you the IP addresses using your bandwidth, what more do > >> you need than that? > >> You may want to map IP addresses to easy to identify DNS names to get > >> a better view of the > >> specific user. > >> Some other command line tools, similar to iptraf: > >> dnstop > >> iftop > >> pktstat > >> ntop > >> iptraf > >> ifstatus > >> jnettop > >> > >> But, all of these are only going to show by IP. I think it''s up to you > >> to know what IP > >> belongs to what user. > >> > >> At a former place I worked, I handed out static IPs via DHCP. Along > >> with that, everyone > >> got a DNS name that I know who it belonged to. Then via, iptraf, I could > >> easily see who was using what. We had less that 100 users, so it wasn''t > to > >> much to keep up with, if you have more users it gets harder as the > >> number of users goes up. > >> > >> bb > >> > >> On Thu, Jun 17, 2010 at 1:14 PM, Nico Pagliaro <nicopag@gmail.com> > wrote: > >> > Hi, is there any way to monitor bandwidth usage in my shorewall that > >> > have 3 > >> > different ISP. Now I am using iptraf, but I would like to know WHO is > >> > using > >> > my bandwidth. Is that possible? > >> > > >> > Really thanks > >> > > >> > > >> > > ------------------------------------------------------------------------------ > >> > ThinkGeek and WIRED''s GeekDad team up for the Ultimate > >> > GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the > >> > lucky parental unit. See the prize list and enter to win: > >> > http://p.sf.net/sfu/thinkgeek-promo > >> > _______________________________________________ > >> > Shorewall-users mailing list > >> > Shorewall-users@lists.sourceforge.net > >> > https://lists.sourceforge.net/lists/listinfo/shorewall-users > >> > > >> > > >> > >> > >> > >> -- > >> Have Mercy & Say Yeah > >> > >> > >> > ------------------------------------------------------------------------------ > >> ThinkGeek and WIRED''s GeekDad team up for the Ultimate > >> GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the > >> lucky parental unit. See the prize list and enter to win: > >> http://p.sf.net/sfu/thinkgeek-promo > >> _______________________________________________ > >> Shorewall-users mailing list > >> Shorewall-users@lists.sourceforge.net > >> https://lists.sourceforge.net/lists/listinfo/shorewall-users > > > > > > > ------------------------------------------------------------------------------ > > ThinkGeek and WIRED''s GeekDad team up for the Ultimate > > GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the > > lucky parental unit. See the prize list and enter to win: > > http://p.sf.net/sfu/thinkgeek-promo > > _______________________________________________ > > Shorewall-users mailing list > > Shorewall-users@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/shorewall-users > > > > > > > > -- > Have Mercy & Say Yeah > > > ------------------------------------------------------------------------------ > ThinkGeek and WIRED''s GeekDad team up for the Ultimate > GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the > lucky parental unit. See the prize list and enter to win: > http://p.sf.net/sfu/thinkgeek-promo > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users >------------------------------------------------------------------------------ ThinkGeek and WIRED''s GeekDad team up for the Ultimate GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo
On Thu, 17 Jun 2010 15:14:49 -0300 Nico Pagliaro <nicopag@gmail.com> wrote:> Hi, is there any way to monitor bandwidth usage in my shorewall that > have 3 different ISP. Now I am using iptraf, but I would like to know > WHO is using my bandwidth. Is that possible? > > Really thankshttp://www.nufw.org/, purhaps. Fog_Watch. ------------------------------------------------------------------------------ ThinkGeek and WIRED''s GeekDad team up for the Ultimate GeekDad Father''s Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo