similar to: Accounting using ip addresses and ulogd

> Send LARTC mailing list submissions to > lartc@mailman.ds9a.nl > > To subscribe or unsubscribe via the World Wide Web, visit > http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc > or, via email, send a message with subject or body ''help'' to > lartc-request@mailman.ds9a.nl > > You can reach the person managing the list at >

Hi, I''m using HTB for bandwidth control, but i''m still not sure how to account the traffic. My config is the following: eth0 goes to internet and eth1 to the clients(I''m shaping both ifaces). I want to log ip traffic from and to the clients. Since htb shapes outgoing traffic I''m not sure how to make the iptables script. This is the script: ${IPTABLES} -N

Hi I am currently learning iptables and would like to see the output of shorewall rules in iptables format, as I would like to make a script for the rules instead of using shorewall. Kind Regards William _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Hi, What do you use for IP traffic accounting on Linux 2.6? I was looking to ipac-ng/pmacct, but what do you use? _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Not sure this is the correct place to post this but I am looking to have status of the firewall and traffic control (active, disabled, stopped etc) on a webpage controlled via something like pid as the machine has many things running on it, like firewall, traffic control, data collection for graphing the traffic flows, as well as other services like squid etc. Any ideas would be most helpful.

Hi all, I think learning curve will decrease if i try to get more info on what i want to do. I would start with thius problem Prob #1 I want to give a limited bandwidth to a single IP. and don''t allow it to cross its ceil. nor borrow unsed from parent. and allow other ip''s to move untouched . comment on How to it and Best way to do it. thanks. Amit

Hi! The Netfilter project proudly presents: ulogd 2.0.0 ulogd is a userspace logging daemon for netfilter/iptables related logging. This includes per-packet logging of security violations, per-packet logging for accounting, per-flow logging and flexible user-defined accounting. ulogd was almost entirely written by Harald Welte, with contributions from fellow hackers such as Pablo Neira

Hi, I have a 3Mbit (up,down) connection going through a Linux box (Debian 600mhz, 500mb ram) using NAT to approx 125 users. Presently I am shaping by marking packets by their port numbers. I''m prioritizing 22, 23, 25, 80, 81, 110, 443, 500, 3389, 1214, 6881:6889, etc, into their appropriate classes depending on weather there getting more or less bandwidth. This has worked pretty

Hi I have written my firewall rules and it is working great, blocking p2p with layer7 and ipp2p between pm and 6am, also using ulog to get in all into mysql only problem is when it comes to accounting for the local traffic as all it shows is ip address, I have been looking around for a command to get the "windoz" name from an ip address then a quick script to change the log entries to

>>Our ISP has given us 5 static IP address plus one router IP address >>and I was wondering if I could get rid of their stupid EN5861 router >>and set up the linux machine to handle all the static addresses and >>routing. I figured I''d have to set up alises for other IP addresses >>eg ifconfig eth0:0 >>xx.xx.xx.193 but once I''ve done that

Hi, I''d like to account the data going out to an interface after shaping and policing. At the moment, I''m using ipt_ACCOUNT for per-IP accounting, but it counts packets regardless if they are dropped or not. Using tc counters directly would force me to install one tc rule per IP which I''d rather avoid. My idea was to use tc actions with ipt_ACCOUNT, but I have no idea

Hi, is it possible to make rules or routes with negated ip addresses like that: ip rule add from ! 192.168.0.0/16 table xyz ? Or is this planned for the future? Thanks Regards Lars Täuber _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

>> No I am using the EN5861, just that we have two ADSL lines and only >> one >> EN5861 and rather than buying another I''d like to use linux to do the >> same job as the en5861, if you know what I mean. > >You can, but since you have two ADSL lines, you''ll need two ADSL devices of some kind, whether it''s a pair of 5861s, or a 5861 and an

Hi Having a problem trying to figure out how to shape local services running on the debian box (asterisk, squid etc) as currently the voice only seems to be getting shaped one way when making external calls. For example I have the rules below (these are the matching rules only not the actual policy rules): #Create Chain for local traffic (outbound) /sbin/iptables -t mangle -A match-all -m

HI , Please for advice. How I can get traffic from classes and to write it into mysql database. Probably this question is often asked but I cannot find good solution. Main problem that I try to fix is that when I do traffic accounting for network with huge number of IP addresses from Linux most of accounting systems doesn''t work very well and made big load of CPU Is there any tool

>>eth1 & eth2 are both connected to the EN5861 router. I''ve done that >>because I couldn''t work out any other way to use the static IP address >>that out ISP have given us. >> > >Aha, this is a config question. You can just add as many ip addresses to each physical card as you like. I forget the exact syntax, but check man pages for

Hello, Is there an easy way, either by scripting or some software project or something similar, to do automatic traffic accounting. I am looking to be able to give each host on my LAN a specific quota of data transfer for a given previous period of time, for example 1 GB in the previous 24 hours. If they exceed that limit, I would like to be able to have the system automatically rate limit

i''ve installed mrtg to make graphics of the trafic from the interfece throw the snmpd, and the same with ipac witch put iptables accounting rules colect them and store, and gets the output, but the "problem" is that ipac graphics are 3 times smaller that the snmpd. Why??? i did catch all the trafic with ipac so no problem here, and i know that ipac/iptables is at level 3, and

Hello, i have a server (486sx and 16ram). My pc is providing internet to 12 other computers. Ethernet cards are realteks 8139 (drivers builtin to the kernel 2.6.8). It gives me this error : NETDEVICE WATCHDOG eth1 : ...timeout. I checked in many places for solutions. Even wrote to this mailinglist. But lately i recived information, that too much upload may mix my adsl modem up. So..... my

Hi, i´ve read about this problem but i didn´t find any solution. I have a router with nat like that: internet - eth0 - Router - eth1 - Lan I made a htb script for shaping outgoing in eth0 and it works great. The problem begin with the incoming traffic... Like other people said, when somebody in the lan uses the tipical download accelerator, the line is out because the bandwidth is divided by