From owner-freebsd-questions@FreeBSD.ORG Tue Mar 25 11:10:57 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 8620E719 for ; Tue, 25 Mar 2014 11:10:57 +0000 (UTC) Received: from mail-yh0-x22c.google.com (mail-yh0-x22c.google.com [IPv6:2607:f8b0:4002:c01::22c]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 4A7E4BDE for ; Tue, 25 Mar 2014 11:10:57 +0000 (UTC) Received: by mail-yh0-f44.google.com with SMTP id f10so224219yha.31 for ; Tue, 25 Mar 2014 04:10:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type:content-transfer-encoding; bh=KvKVDWOmW8sxr28BEBQqog1QcC6tOoqx436GGWColtE=; b=QXiqnNy79sPF1mDErqVCex55JYBpQGnZRNA6wv9Dw+gnMiZdgON9NnlEWS6Nwq60al 9MwsWwaC1oPXDQCOiR1QEzd4sz2UR333RoBGmi6cVS/B87D0zgdXjQ0Xvoboy1t6qH6X RkaOca0YiqxU3hDP8V5UyAOalm9xvVaml8kbkS2C1L5SVsrPGojCAgpo+ZS9wCt6DKLy VfrrACv4/cbNWhXSdmeb82pKBs3IoCSE/wDUfxd50K0DJ+nKMXp0zFGqe93MM/EoWWyL 3RZmMWLsD1J4lOEle/NbnIZn32IMp4ZaZgXkppEbhxdL7S0zRH8c6oEd1yDJBI6le9WG FJ2Q== MIME-Version: 1.0 X-Received: by 10.236.159.165 with SMTP id s25mr71038691yhk.24.1395745856488; Tue, 25 Mar 2014 04:10:56 -0700 (PDT) Sender: fluca1978@gmail.com Received: by 10.170.166.4 with HTTP; Tue, 25 Mar 2014 04:10:56 -0700 (PDT) In-Reply-To: References: <533030BC.60306@webrz.net> Date: Tue, 25 Mar 2014 12:10:56 +0100 X-Google-Sender-Auth: AGH6IjjcCqFelgKo9naald2lfJM Message-ID: Subject: Re: Real time traffic overview From: Luca Ferrari To: Jos Chrispijn Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: "freebsd-questions@FreeBSD.org" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Mar 2014 11:10:57 -0000 On Mon, Mar 24, 2014 at 2:23 PM, Trond Endrest=F8l wrote: > On Mon, 24 Mar 2014 14:18+0100, Jos Chrispijn wrote: > >> Running my server on FreeBSD 9.2 in the DMZ, I would like to know if >> there is a program / graphical user interface on which I _real_time_ >> can see what kind of traffic is entering my server (ports)? Running >> ipfw but that is more statical / once a day list overview. > > Unless you also need to monitor IPv6 traffic, have a look at > net-mgmt/iftop. Based on my personal experience, spend a little more time configuring a flow analysis system (flowtools). It will give you the capability to analyze traffic offline. For the online/real time part use ethereal or wireshark or something alike. Luca