How to account traffic in IPTABLES?

How to account traffic in IPTABLES?

[Bobo]

 HI

      I use the iptables + squid as the gateway of one LAN,and it is very good in fact.

   Now,I would like to get the traffic accounting of each IP of the LAN.

  How to get these data ? Does IPtables contain these data?

  Are there some tools for traffic accounting of iptables?

  I could use perl and shell programing.Could I analyze the log file of iptables to account?

  Thanks

How to account traffic in IPTABLES?

[Bobo]

 HI

      I use the iptables + squid as the gateway of one LAN,and it is very good in fact.

   Now,I would like to get the traffic accounting of each IP of the LAN.

  How to get these data ? Does IPtables contain these data?

  Are there some tools for traffic accounting of iptables?

  I could use perl and shell programing.Could I analyze the log file of iptables to account?

  Thanks

Re: How to account traffic in IPTABLES?

[Steven Schmidt]

Have a look at IPAC-NG in sourceforge. Works well.

----- Original Message -----
From: "Bobo" <boboaq@163.com>
To: <netfilter-devel@lists.netfilter.org>
Cc: <netfilter@lists.netfilter.org>
Sent: Monday, March 31, 2003 1:47 AM
Subject: How to account traffic in IPTABLES?


> HI
>
>       I use the iptables + squid as the gateway of one LAN,and it is very
good in fact.
>
>    Now,I would like to get the traffic accounting of each IP of the LAN.
>
>   How to get these data ? Does IPtables contain these data?
>
>   Are there some tools for traffic accounting of iptables?
>
>   I could use perl and shell programing.Could I analyze the log file of
iptables to account?
>
>   Thanks
>
>
>
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>

Re: How to account traffic in IPTABLES?

[Stephane Ouellette]

Bobo wrote:

> HI
>
>      I use the iptables + squid as the gateway of one LAN,and it is very good in fact.
>
>   Now,I would like to get the traffic accounting of each IP of the LAN.
>
>  How to get these data ? Does IPtables contain these data?
>  
>

try this one:

iptables -nvL INPUT

>  Are there some tools for traffic accounting of iptables?
>  
>

The iptables command itself !!!

>  I could use perl and shell programing.Could I analyze the log file of iptables to account?
>  
>

in Perl:

open(CHAINS, "iptables -nvL INPUT|") or die "Error reading chains\n";

while(<CHAINS>)
{
# read the lines one by one, matching on the text you want
}

close(CHAINS);

>  Thanks
>
>
>
>
>
>  
>

Re: How to account traffic in IPTABLES?

[Raymond Leach]

[-- Attachment #1: Type: text/plain, Size: 2829 bytes --]

Hi

Create an accounting chain:

IPTABLES=/sbin/iptables

### accounting chain
$IPTABLES -N accounting
$IPTABLES -A accounting -i eth0 -d $IP_INT_MAIL -j RETURN
$IPTABLES -A accounting -o eth0 -s $IP_INT_MAIL -j RETURN
$IPTABLES -A accounting -i eth0 -d $IP_INT_WEB7 -j RETURN
$IPTABLES -A accounting -o eth0 -s $IP_INT_WEB7 -j RETURN
$IPTABLES -A accounting -i eth0 -d $IP_INT_WEB1 -j RETURN
$IPTABLES -A accounting -o eth0 -s $IP_INT_WEB1 -j RETURN
$IPTABLES -A accounting -i eth0 -d $IP_INT_WEB3 -j RETURN
$IPTABLES -A accounting -o eth0 -s $IP_INT_WEB3 -j RETURN
$IPTABLES -A accounting -i eth0 -d $IP_INT_WEB4 -j RETURN
$IPTABLES -A accounting -o eth0 -s $IP_INT_WEB4 -j RETURN
$IPTABLES -A accounting -i eth0 -d $IP_INT_ORA2 -j RETURN
$IPTABLES -A accounting -o eth0 -s $IP_INT_ORA2 -j RETURN
$IPTABLES -A accounting -i eth2 -s $NET_INT -d ! $NET_DMZ -j RETURN
$IPTABLES -A accounting -o eth2 -s ! $NET_DMZ -d $NET_INT -j RETURN
$IPTABLES -A INPUT -j accounting
$IPTABLES -A FORWARD -j accounting
$IPTABLES -A OUTPUT -j accounting

Then to see the traffic use:
/sbin/iptables -nvL accounting


On Mon, 2003-03-31 at 19:10, Stephane Ouellette wrote:
> Bobo wrote:
> 
> > HI
> >
> >      I use the iptables + squid as the gateway of one LAN,and it is very good in fact.
> >
> >   Now,I would like to get the traffic accounting of each IP of the LAN.
> >
> >  How to get these data ? Does IPtables contain these data?
> >  
> >
> 
> try this one:
> 
> iptables -nvL INPUT
> 
> >  Are there some tools for traffic accounting of iptables?
> >  
> >
> 
> The iptables command itself !!!
> 
> >  I could use perl and shell programing.Could I analyze the log file of iptables to account?
> >  
> >
> 
> in Perl:
> 
> open(CHAINS, "iptables -nvL INPUT|") or die "Error reading chains\n";
> 
> while(<CHAINS>)
> {
> # read the lines one by one, matching on the text you want
> }
> 
> close(CHAINS);
> 
> >  Thanks
> >
> >
> >
> >
> >
> >  
> >
> 
> 
-- 
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
(  Raymond Leach                       )
 ) Knowledge Factory                  (
(                                      )
 ) Tel: +27 11 445 8100               (
(  Fax: +27 11 445 8101                )
 )                                    (
(  http://www.knowledgefactory.co.za/  )
 ) http://www.saptg.co.za/            (
(  http://www.mapnet.co.za/            )
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   o                                o
    o                              o
        .--.                  .--.
       | o_o|                |o_o |
       | \_:|                |:_/ |
      / /   \\              //   \ \
     ( |     |)            (|     | )
     /`\_   _/'\          /'\_   _/`\
     \___)=(___/          \___)=(___/


[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]