Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 May 2003 12:57:31 +0300
From:      "PsYxAkIaS (FreeBSD)" <freebsd@psyxakias.com>
To:        "Allan Jude" <937863@primus.ca>
Cc:        freebsd-isp@freebsd.org
Subject:   Re: Network Statistics
Message-ID:  <003e01c31ac8$69b55a20$162ea8c0@computer>
References:  <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA4RatOouMvEOzXXL4aXw9/cKAAAAQAAAANJQ2dg0JSE6o+CBzvOtrqQEAAAAA@primus.ca>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
Ipband seems good but i think i didnt explain what i want.

I want to see statistics like this:

Currently usage:
10.10.10.1 = 400 kbps
10.10.10.2 = 4 kbps
10.10.10.3 = 11 kbps
10.10.10.4 = 15 kbps
10.10.10.5 = 41 kbps
10.10.10.6 = 38 kbps
10.10.10.7 = 10 kbps
10.10.10.8 = 6540 kbps

so in that case i would block my local ip (10.10.10.8) that used so much
bandwidth.


Anyone know a util like that?
----- Original Message -----
From: "Allan Jude" <937863@primus.ca>
To: "'PsYxAkIaS (FreeBSD)'" <freebsd@psyxakias.com>
Cc: <freebsd-isp@freebsd.org>
Sent: Wednesday, May 14, 2003 6:46 PM
Subject: RE: Network Statistics


> Ipband
>
> It's in the ports tree, it is ment to email you whenever any of your ips
> goes over a set limit (300kb/sec)
> You can change a bit of code to make it install firewall rules rather
> than email you
>
>
> -----Original Message-----
> From: owner-freebsd-isp@freebsd.org
> [mailto:owner-freebsd-isp@freebsd.org] On Behalf Of PsYxAkIaS (FreeBSD)
> Sent: Wednesday, May 14, 2003 7:46 AM
> To: freebsd-isp@freebsd.org
> Subject: Network Statistics
>
>
> Hey all
>
> I am currently using tcpstat to check if I am getting attacked, tcpdump
> to trace the ips and what type of attack and ipfw firewall to block
> them. Sometimes trafshow too but on big attacks trafshow isnt helpful.
>
> 1. Do you have any other utils than tcpdump to suggest ?
>
> 2. I was thinking to make a script to auto-block (via ipfw firewall) any
> ip that spends 300 kb/sec for more than 1 minute. Do you know any tools
> that may show me which of my ips are getting more than 300 kb/sec? I
> hope you got my point
>
>
> Best Regards
> _______________________________________________
> freebsd-isp@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"
>




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?003e01c31ac8$69b55a20$162ea8c0>