From mboxrd@z Thu Jan 1 00:00:00 1970 From: Torsten Luettgert Subject: Re: tracking usage by mac address Date: Mon, 30 Aug 2004 13:34:58 +0200 Sender: netfilter-bounces@lists.netfilter.org Message-ID: <1093865668.2761.6.camel@scaramouche> References: <41329413.3080407@shaw.ca> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <41329413.3080407@shaw.ca> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii" To: Henry Baxter Cc: netfilter@lists.netfilter.org On Mon, 2004-08-30 at 04:42, Henry Baxter wrote: > Ultimately I am hoping to track the bandwidth usage of about 50 client > computers through my router based on their MAC address. I understand > that by simply writing a rule that does nothing to the packet, such as > 'iptables -A FORWARD -m ' I can parse the netfilter log and > find out what I need. This seems rather convoluted though - getting > netfilter to create a basically human readable log file, and then > parsing it. You could also use ULOG and the ulog-acctd from http://alioth.debian.org/projects/pkg-ulog-acctd/ (if you want to use this on RedHat/Fedora, I could send you my RPM I made from it) This also generates a somewhat user-readable log file which you'd need to parse, but it can aggregate several packets (thus reducing the size of the log file) and generate a Cisco-compatible traffic log file. Parsers for that should not be hard to find. Greetings, Torsten