Date: Wed, 20 Apr 2016 23:58:11 +0200 From: Ben Woods <woodsb02@gmail.com> To: "Ronald F. Guilmette" <rfg@tristatelogic.com> Cc: freebsd-ipfw@freebsd.org Subject: Re: How can I find the bandwidth hogs? Message-ID: <CAOc73CCMyLkhZb=i%2BU1_m3kPJ3r19Hp1J_svVD0g=x_NfpKiAg@mail.gmail.com> In-Reply-To: <162.1461147716@server1.tristatelogic.com> References: <162.1461147716@server1.tristatelogic.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 20 April 2016 at 12:21, Ronald F. Guilmette <rfg@tristatelogic.com> wrote: > > Rather, I want ipfw... or some other tool... to give me, at the > end of the test time period... a nice LIST of how many bytes came in > from each and every separate source IP over the given time period. > (There could be hundreds or thousands of IPs sending me packets > with a source port of 80 or 443 over the given time period, so > that list could end up being really long.) > > Can anybody give me a hint of how to do this? Easiest solution I can think of: Use net-mgmt/darkstat. https://unix4lyfe.org/darkstat/ Slightly more complicated solution, but with potentially more power for filtering the data: Netflow/NfDump/NfSen https://forums.freebsd.org/threads/49724/ Good luck! Regards, Ben
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAOc73CCMyLkhZb=i%2BU1_m3kPJ3r19Hp1J_svVD0g=x_NfpKiAg>