Date: Mon, 17 Jan 2005 21:11:13 +0100 From: "Andrew Seguin" <asegu@borgtech.ca> To: <freebsd-net@freebsd.org> Subject: Network accounting Message-ID: <20050117201513.3388954A5@borgtech.ca>
next in thread | raw e-mail | index | archive | help
I=92ve searched Google, I=92ve searched through the FreeBSD-net archives = and have gotten a few leads to what I=92m seeking, but unfortunately, = nothing solid enough for me to go off of (so yes, I=92ve been doing some = homework first! ;) ) =20 But, here=92s my situation. A dedicated FreeBSD transparent = firewall-bridge with 3 NICs (two for the bridge w/o IP, one for console). I=92m using = IPFW for the firewall, and at the moment I=92m doing some very bare-bones = statistics via a couple of count rules. I track abusive users through random usage = of TCPDump (when I feel like it basically). =20 However, I have some heavy downloader=92s on the campus so I want to do = deep statistics gathering. Mainly, how much is (daily/weekly/monthly) the = traffic by IP address and independently the traffic by service (HTTP/SMTP). =20 So my research seems to indicate that the best is to use something to generate netflow data (Maybe IPCad?). However, I sort of feel that=92s a = bit heavy for my needs, I=92d have only one source of data collection. But = it=92s not like I=92m tight in processor power nor hard disk space and I even = have a second server already running web/Mysql under my control. I have a small list of tools, but it all leads up to my question. =20 I therefore ask out to the list, what recommendations for traffic accounting/statistics gathering can you give me? --=20 No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.300 / Virus Database: 265.6.13 - Release Date: 1/16/2005 =20
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050117201513.3388954A5>