From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Ming-Ching Tiew" Date: Thu, 06 Sep 2007 05:56:32 +0000 Subject: Re: [LARTC] NAT-aware traffic analysis Message-Id: <00f701c7f04a$ad1d1940$0100a8c0@MingChing> List-Id: References: <00af01c7ef6a$1c8a3560$0100a8c0@MingChing> In-Reply-To: <00af01c7ef6a$1c8a3560$0100a8c0@MingChing> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: lartc@vger.kernel.org From: "Marco Aurelio" > If you use IFB or IMQ you can shape the outgoing WAN traffic before NAT > I am not sure if I understand this reply or the reply seems to me, is not replying to my original question. I am asking how to collect statistics about LAN users with respect to their WAN usage, with LAN IP as the breakdown. I am not asking how to do traffic shaping. And may I know how does IMQ help that ? Actually with more thought given to the problem, I think I am quite inclined to using iptables ULOG. But ULOG solution has a few things need mentioning :- 1. Might be very heavy on system loading. Hope people can clarify if it is a real concern. And anyone has experience using ULOG 2.x ? Will 2.x be more friendly to system loading compared to 1.x ? 2. Logging goes into either file or database. It's to be a offline monitoring mechanism. Is there a way to use ULOG for online monitoring ? 3. Next, each ULOG is only specifying one side of the traffic. eg :- iptables -A FORWARD -i eth0 -o eth1 -j ULOG ..... I will need another iptables rule to specify the returning traffic, eg :- iptables -A FORWARD -i eth1 -o eth0 -j ULOG ..... Combining two independent logs as one connection will still be a challenge. Hope to see more suggestions and discussion. Thank you. _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc