Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 27 Oct 1999 12:14:16 +1000
From:      Gregory Bond <gnb@itga.com.au>
To:        freebsd-ipfw@FreeBSD.ORG
Subject:   monitoring ipfw with mrtg?
Message-ID:  <199910270214.MAA14865@lightning.itga.com.au>

next in thread | raw e-mail | index | archive | help

Any ready-made hints about monitoring ipfw rule byte/packet counts from a
(remote) mrtg session?  I can think of lots of hacks that would work, but none 
are very elegant, and some are not real efficient, and some are not suitable 
for implementing on a firewall.....

[ 
btw: ipfw is just -great- at measuring traffic (and can give up much more
information that e.g. router logs).  I use something like this
	$fwcmd add 47 skipto 50 ip from ${oip}:${omask} to any in recv ${oif}
	$fwcmd add 48 skipto 50 ip from ${ispnet} 8080 to any in recv ${oif}
	$fwcmd add 49 skipto 50 ip from any to any in recv ${oif} 

The first rule tells me how much traffic I received from other local hosts, the
second how many bytes I received from the ISP's web cache, the third the number
of bytes I receive from the internet - which is how many bytes I have to pay my
ISP for!  I'm trying to graph these three numbers using a remote mrtg session.

This is probably old news to most of you, but I just discovered it...
]



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199910270214.MAA14865>