Re: Bandwidth Monitoring Software

[Chris Cappuccio <chris@dqc.org>]

pf has no count rule, and i don't think it should be carried over anyways-

i think the kernel is really the wrong place to do this since
it seems to slow the routing down quite a bit when you get many count rules

we already re-wrote ipacct to use ipfm (i think ipfm is in the ports) a
while back

it is much more flexible this way..ipfm will count for an entire IP range
and only tell you the IPs that have traffic, instead of having to add
a count rule for each freakin' IP!! also, ipfm uses pcap so it doesn't
interfere with routing speed.

it hasn't been released yet...but i can do that..

other options are ipa (which is in the ports for sure) and bandmin

also, you can use mrtg/cricket/etc.. and snmpd to get graphs if that's
what you really want...

Brad [brad@comstyle.com] wrote:
> ipacct is perfect for what you're trying todo.
> 
> http://www2.empnet.com/ipacct/
> 
> Hey Chris, any chance of supporting ipacct with PF too ?
> 
> // Brad
> 
> brad@comstyle.com
> brad@openbsd.org
> 
> >On Fri, Aug 03, 2001 at 10:36:38AM -0700, Tom D said:
> >> I'm looking for a good bandwidth monitoring software that would
> >> monitor traffic also on one IP no the whole Subnet and MRTG if
> >> out of the question.
> >
> >well, i'm not going to question why MRTG is not an option (RRDtool? :)
> >
> >maybe /usr/ports/net/trafshow/ could work? you can do tcpdump type
> >filtering..
> >
> >trafshow host 10.0.0.1 and not port 22
> >
> >etc..
> >
> >werd.
> >--
> >dmuz
> >dmuz.angrypacket.com <- vanity site
> >sec.angrypacket.com <- lame security site
> >
> >"I'd rather have a bottle in front of me than a frontal lobotomy." Tom Waits
>