From owner-freebsd-hackers Tue Sep 4 16:25:49 2001 Delivered-To: freebsd-hackers@freebsd.org Received: from mimer.webgiro.com (mailer2.webgiro.com [213.162.131.18]) by hub.freebsd.org (Postfix) with ESMTP id B9AB837B403; Tue, 4 Sep 2001 16:25:43 -0700 (PDT) Received: from webgiro.com (mailer2.webgiro.com [213.162.131.18]) by mimer.webgiro.com (Postfix) with ESMTP id 04D6C68469; Wed, 5 Sep 2001 01:25:38 +0200 (CEST) Message-ID: <3B95623F.B41731F6@webgiro.com> Date: Wed, 05 Sep 2001 01:22:39 +0200 From: Andrzej Bialecki Organization: WebGiro AB X-Mailer: Mozilla 4.77 [en] (Windows NT 5.0; U) X-Accept-Language: en MIME-Version: 1.0 To: deepak@ai.net Cc: "freebsd-isp@FreeBSD. ORG" , "freebsd-hackers@FreeBSD. ORG" Subject: Re: Flow cache on FreeBSD? References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Deepak Jain wrote: > > Is there a way to provide functionality similar to ip flow cache stats on a > FreeBSD router? > > Let me clarify, I am talking about being able to easily see groupings of > traffic go through a FreeBSD box. So if a downstream customer is being > attacked, a simple table in realtime [or near real-time] will show the > attack characteristics [ip ranges, packet types, general number of packets, > etc].? Yes. Please go and find the NeTraMet package on the web - it should compile cleanly on FreeBSD (if not the latest versions, then surely some older - I used them some time ago). It's very configurable, and comes with a lot of examples (among others, and XWindow application to watch the flows in real-time). -- Andrzej // ---------------------------------------------------------------- // Andrzej Bialecki , Chief System Architect // WebGiro AB, Sweden (http://www.webgiro.com) // ---------------------------------------------------------------- // FreeBSD developer (http://www.freebsd.org) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message