Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 20 Apr 2016 23:58:11 +0200
From:      Ben Woods <woodsb02@gmail.com>
To:        "Ronald F. Guilmette" <rfg@tristatelogic.com>
Cc:        freebsd-ipfw@freebsd.org
Subject:   Re: How can I find the bandwidth hogs?
Message-ID:  <CAOc73CCMyLkhZb=i+U1_m3kPJ3r19Hp1J_svVD0g=x_NfpKiAg@mail.gmail.com>
In-Reply-To: <162.1461147716@server1.tristatelogic.com>
References:  <162.1461147716@server1.tristatelogic.com>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
On 20 April 2016 at 12:21, Ronald F. Guilmette <rfg@tristatelogic.com>
wrote:
>
> Rather, I want ipfw... or some other tool... to give me, at the
> end of the test time period... a nice LIST of how many bytes came in
> from each and every separate source IP over the given time period.
> (There could be hundreds or thousands of IPs sending me packets
> with a source port of 80 or 443 over the given time period, so
> that list could end up being really long.)
>
> Can anybody give me a hint of how to do this?


Easiest solution I can think of: Use net-mgmt/darkstat.
https://unix4lyfe.org/darkstat/

Slightly more complicated solution, but with potentially more power for
filtering the data: Netflow/NfDump/NfSen
https://forums.freebsd.org/threads/49724/

Good luck!

Regards,
Ben



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?CAOc73CCMyLkhZb=i+U1_m3kPJ3r19Hp1J_svVD0g=x_NfpKiAg>