From owner-freebsd-questions@FreeBSD.ORG Wed Sep 14 16:55:34 2005 Return-Path: X-Original-To: freebsd-questions@FreeBSD.org Delivered-To: freebsd-questions@FreeBSD.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id AA52616A41F for ; Wed, 14 Sep 2005 16:55:34 +0000 (GMT) (envelope-from petermatulis@yahoo.ca) Received: from web60023.mail.yahoo.com (web60023.mail.yahoo.com [209.73.178.71]) by mx1.FreeBSD.org (Postfix) with SMTP id 3E49543D46 for ; Wed, 14 Sep 2005 16:55:34 +0000 (GMT) (envelope-from petermatulis@yahoo.ca) Received: (qmail 88246 invoked by uid 60001); 14 Sep 2005 16:55:33 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.ca; h=Message-ID:Received:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=roL4uF2mJDTLD2ToryrBRhmHnuFHA1p9HYytSukr5ULkTD5h5JEQM6ZVKr4UfFtmXXwXH0QMNZxAZTetUvLDF5J32iTng8y5U/idy72HTERRcDct5h748M3FqCJXOBIlBUfJ8W76a84z1EJlCjMOyPiKmg6OViQCr5VApVdEl/4= ; Message-ID: <20050914165533.88244.qmail@web60023.mail.yahoo.com> Received: from [216.252.85.61] by web60023.mail.yahoo.com via HTTP; Wed, 14 Sep 2005 12:55:33 EDT Date: Wed, 14 Sep 2005 12:55:33 -0400 (EDT) From: Peter Matulis To: freebsd-questions@FreeBSD.org In-Reply-To: <1126715774.12094.12.camel@Mandarin-04.mainframe.ca> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Cc: Subject: Re: traffic accounting. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Sep 2005 16:55:34 -0000 --- Derrick MacPherson wrote: > > Are you searching for something that looks good or something more factual? > > Probably more pretty than extremely accurate. I've actually mirrored a > port on the switch that's to our internet connection, and have ntop > monitoring that. Seems to be working fine, I guess I would like a bit > more of a warm fuzzy feeling that what i'm doing is right. > > > Another question to consider is whether you are interested in bandwidth > > (bytes/sec) or in actual bytes transferred. There are fewer tools that provide > > persistent & archivable stats for the latter and I have yet to find one that > > displays the latter in graphical form without it becoming a science project. > > bytes transfered is better, but both appreciated. And ya, it seems like > there's a few solutions, none perfect. I am pushing for the replacement > of our Pix's, my preference is PF on *BSD, but again, they want > something that looks pretty. I agree that bytes transferred is very nice to have (seems pretty basic). As mentioned by another, there is a small utility called ipfm that does the trick. There are a couple of scripts on the net that process the output into something more useful (bytes for a specified month). For the prettiness factor, pf integrates painlessly with pfstat and symon/syweb. Here is something from pfstat. It shows, well, pf statistics (bytes/sec for the last 12 hours): http://papamike.ca/misc/pass_block_12.png -- Peter __________________________________________________________ Find your next car at http://autos.yahoo.ca