* Re: [LARTC] realtime trafic monitor
2004-11-22 11:25 [LARTC] realtime trafic monitor Gogu Ionut
@ 2004-11-22 11:37 ` Rajkumar S
2004-11-22 11:45 ` Michael Schwartzkopff
` (7 subsequent siblings)
8 siblings, 0 replies; 10+ messages in thread
From: Rajkumar S @ 2004-11-22 11:37 UTC (permalink / raw)
To: lartc
Gogu Ionut wrote:
> Hello !! i search a small utility (console based) to view the traffic on
> real time made by 1 user (ip ) ...something like :
>
>
> 192.168.1.2 .... 11 kbps
> 192.168.1.3 .... 111 kbps
> 192.168.1.4 .... 88 kbps
> 192.168.1.5 .... 64 kbps
Try iptraf.
raj
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 10+ messages in thread* Re: [LARTC] realtime trafic monitor
2004-11-22 11:25 [LARTC] realtime trafic monitor Gogu Ionut
2004-11-22 11:37 ` Rajkumar S
@ 2004-11-22 11:45 ` Michael Schwartzkopff
2004-11-22 11:49 ` Gogu Ionut
` (6 subsequent siblings)
8 siblings, 0 replies; 10+ messages in thread
From: Michael Schwartzkopff @ 2004-11-22 11:45 UTC (permalink / raw)
To: lartc
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Try iftop.
Am Montag, 22. November 2004 12:25 schrieb Gogu Ionut:
> Hello !! i search a small utility (console based) to view the traffic on
> real time made by 1 user (ip ) ...something like :
>
>
> 192.168.1.2 .... 11 kbps
> 192.168.1.3 .... 111 kbps
> 192.168.1.4 .... 88 kbps
> 192.168.1.5 .... 64 kbps
>
> Thanks!
>
>
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
- --
Dr. Michael Schwartzkopff
MultiNET Services GmbH
Bretonischer Ring 7
85630 Grasbrunn
Tel: (+49 89) 456 911 - 0
Fax: (+49 89) 456 911 - 21
mob: (+49 174) 343 28 75
PGP Fingerprint: F919 3919 FF12 ED5A 2801 DEA6 AA77 57A4 EDD8 979B
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBodFGqndXpO3Yl5sRAncuAKCDZ4U8SGuj6PkNwF7zfE5wcu5oPgCffrsQ
IlEULfk2fFJ+kT8GZJWZMC0=loW6
-----END PGP SIGNATURE-----
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 10+ messages in thread* [LARTC] realtime trafic monitor
2004-11-22 11:25 [LARTC] realtime trafic monitor Gogu Ionut
2004-11-22 11:37 ` Rajkumar S
2004-11-22 11:45 ` Michael Schwartzkopff
@ 2004-11-22 11:49 ` Gogu Ionut
2004-11-22 11:56 ` Michael Schwartzkopff
` (5 subsequent siblings)
8 siblings, 0 replies; 10+ messages in thread
From: Gogu Ionut @ 2004-11-22 11:49 UTC (permalink / raw)
To: lartc
[-- Attachment #1: Type: text/plain, Size: 767 bytes --]
ok .. a use iptraf, but iptraf show my evry connection from computerX:
84.135.15.81:4899 > 163 7940 --A- eth0 ?
82.77.210.7:3475 > 212 323323 -PA- eth0 ?
62.231.96.133:80 > 163 7880 --A- eth0 ?
82.77.210.7:3479 > 212 117268 -PA- eth0 ?
i need an utility that showme total trafic made by 1 computer at moment t;
82.77.210.4 ... 125 kbps;
82.77.210.7 ... 128kbps ..etc
Thanks
[-- Attachment #2: Type: text/html, Size: 3501 bytes --]
^ permalink raw reply [flat|nested] 10+ messages in thread* Re: [LARTC] realtime trafic monitor
2004-11-22 11:25 [LARTC] realtime trafic monitor Gogu Ionut
` (2 preceding siblings ...)
2004-11-22 11:49 ` Gogu Ionut
@ 2004-11-22 11:56 ` Michael Schwartzkopff
2004-11-22 12:41 ` Nachko Halachev
` (4 subsequent siblings)
8 siblings, 0 replies; 10+ messages in thread
From: Michael Schwartzkopff @ 2004-11-22 11:56 UTC (permalink / raw)
To: lartc
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
have a look at iftop and use the options. It is very simple.
But iptraf should also be able to do what you want.
Am Montag, 22. November 2004 12:49 schrieb Gogu Ionut:
> ok .. a use iptraf, but iptraf show my evry connection from computerX:
>
> 84.135.15.81:4899
> > 163 7940 --A- eth0 ? 82.77.210.7:3475
> > 212
> 323323 -PA- eth0 ?
>
> 62.231.96.133:80
> > 163 7880 --A- eth0 ? 82.77.210.7:3479
> > 212
> 117268 -PA- eth0 ?
>
>
> i need an utility that showme total trafic made by 1 computer at moment t;
>
> 82.77.210.4 ... 125 kbps;
> 82.77.210.7 ... 128kbps ..etc
>
> Thanks
- --
Dr. Michael Schwartzkopff
MultiNET Services GmbH
Bretonischer Ring 7
85630 Grasbrunn
Tel: (+49 89) 456 911 - 0
Fax: (+49 89) 456 911 - 21
mob: (+49 174) 343 28 75
PGP Fingerprint: F919 3919 FF12 ED5A 2801 DEA6 AA77 57A4 EDD8 979B
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBodQKqndXpO3Yl5sRAkMoAKCGT0yRAsROB8tn9m7wvGrZyJKRVQCgszWB
EnzT9OuA6KoHh8CrMyG7W6Y=3gfG
-----END PGP SIGNATURE-----
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 10+ messages in thread* Re: [LARTC] realtime trafic monitor
2004-11-22 11:25 [LARTC] realtime trafic monitor Gogu Ionut
` (3 preceding siblings ...)
2004-11-22 11:56 ` Michael Schwartzkopff
@ 2004-11-22 12:41 ` Nachko Halachev
2004-11-22 13:08 ` Ronny Aasen
` (3 subsequent siblings)
8 siblings, 0 replies; 10+ messages in thread
From: Nachko Halachev @ 2004-11-22 12:41 UTC (permalink / raw)
To: lartc
Hello,
Right now i am playing with trafshow. Very impressive .
Following command line :
trafshow -n -i eth1 net 192.168.1.0/24
will do what you like.
On Monday 22 November 2004 13:25, Gogu Ionut wrote:
> Hello !! i search a small utility (console based) to view the traffic on
> real time made by 1 user (ip ) ...something like :
>
>
> 192.168.1.2 .... 11 kbps
> 192.168.1.3 .... 111 kbps
> 192.168.1.4 .... 88 kbps
> 192.168.1.5 .... 64 kbps
>
> Thanks!
>
>
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
--
Regards,
Nachko Halachev
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 10+ messages in thread* Re: [LARTC] realtime trafic monitor
2004-11-22 11:25 [LARTC] realtime trafic monitor Gogu Ionut
` (4 preceding siblings ...)
2004-11-22 12:41 ` Nachko Halachev
@ 2004-11-22 13:08 ` Ronny Aasen
2004-11-23 0:27 ` NightInTheCity
` (2 subsequent siblings)
8 siblings, 0 replies; 10+ messages in thread
From: Ronny Aasen @ 2004-11-22 13:08 UTC (permalink / raw)
To: lartc
try ipfm (ip flow meter)
On Mon, 2004-11-22 at 12:25, Gogu Ionut wrote:
> Hello !! i search a small utility (console based) to view the traffic on
> real time made by 1 user (ip ) ...something like :
>
>
> 192.168.1.2 .... 11 kbps
> 192.168.1.3 .... 111 kbps
> 192.168.1.4 .... 88 kbps
> 192.168.1.5 .... 64 kbps
>
> Thanks!
>
>
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
--
Ronny Aasen <list@datapart-as.no>
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 10+ messages in thread* Re: [LARTC] realtime trafic monitor
2004-11-22 11:25 [LARTC] realtime trafic monitor Gogu Ionut
` (5 preceding siblings ...)
2004-11-22 13:08 ` Ronny Aasen
@ 2004-11-23 0:27 ` NightInTheCity
2004-11-23 1:25 ` Josh Nerius
2004-11-25 2:06 ` micah milano
8 siblings, 0 replies; 10+ messages in thread
From: NightInTheCity @ 2004-11-23 0:27 UTC (permalink / raw)
To: lartc
hmmm ... i don't really know if i should classify this as
real time, but i'll go ahead.
depends how much of your real time are u going to spend on it.
background:
following multiple papers@web first i started parsing whetever tool's
output came in my hand e.g. ifconfig and so on, than i upgraded to
ipchains/later on iptables accounting. (e.g create 2 chains, jump dst /
src from ips to be monitored, querry the chain). still no
satisfaction. than iptraf and friends. [and i even parsed human
readable output to rrdtool's rrds.] still no satisfaction. this is not
realtime. (or realtime = very complex for me?)
following cisco's NetFlow implementations @ linux i came across
multiple tools that would do similar things to ip flow export in cisco
routers. none until couple of months guaranteed my satisfaction. i
mean softflowd (disliked promiscuous mode), fprobe/ulogd-probe (too
harsh combination of ulogd targets and network traffic sampling) and
so on. even ntop.
so i would recommend strongly using <<ipcad>> daemon to implement network
traffic sampling and NetFlow export; flow-tools to capture NetFlow
dataflow and analyze. and this is real time by all means traffic
monitoring.not just 100kbps on this target, but 10 packets there, 200
bits there, when, where, all beeing agregated and transformed to feed one's joy to
handle numbers. lots.
have phun.
NightInTheCity
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 10+ messages in thread* Re: [LARTC] realtime trafic monitor
2004-11-22 11:25 [LARTC] realtime trafic monitor Gogu Ionut
` (6 preceding siblings ...)
2004-11-23 0:27 ` NightInTheCity
@ 2004-11-23 1:25 ` Josh Nerius
2004-11-25 2:06 ` micah milano
8 siblings, 0 replies; 10+ messages in thread
From: Josh Nerius @ 2004-11-23 1:25 UTC (permalink / raw)
To: lartc
tcptrack provide the functionality you are looking for.
http://www.rhythm.cx/~steve/devel/tcptrack/
Josh Nerius
On Mon, 22 Nov 2004 13:25:08 +0200, Gogu Ionut <igogu@umsoft.ro> wrote:
>
>
> Hello !! i search a small utility (console based) to view the traffic on
> real time made by 1 user (ip ) ...something like :
>
> 192.168.1.2 .... 11 kbps
> 192.168.1.3 .... 111 kbps
> 192.168.1.4 .... 88 kbps
> 192.168.1.5 .... 64 kbps
>
> Thanks!
>
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
>
--
Math problems? Call 1-800-[(10x)(13i)^2]-[sin(xy)/2.362x]
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 10+ messages in thread* Re: [LARTC] realtime trafic monitor
2004-11-22 11:25 [LARTC] realtime trafic monitor Gogu Ionut
` (7 preceding siblings ...)
2004-11-23 1:25 ` Josh Nerius
@ 2004-11-25 2:06 ` micah milano
8 siblings, 0 replies; 10+ messages in thread
From: micah milano @ 2004-11-25 2:06 UTC (permalink / raw)
To: lartc
I've found pktstat to be almost exactly what you are looking for.
On Mon, 22 Nov 2004 19:25:31 -0600, Josh Nerius <jnerius@gmail.com> wrote:
> tcptrack provide the functionality you are looking for.
>
> http://www.rhythm.cx/~steve/devel/tcptrack/
>
> Josh Nerius
>
>
>
>
> On Mon, 22 Nov 2004 13:25:08 +0200, Gogu Ionut <igogu@umsoft.ro> wrote:
> >
> >
> > Hello !! i search a small utility (console based) to view the traffic on
> > real time made by 1 user (ip ) ...something like :
> >
> > 192.168.1.2 .... 11 kbps
> > 192.168.1.3 .... 111 kbps
> > 192.168.1.4 .... 88 kbps
> > 192.168.1.5 .... 64 kbps
> >
> > Thanks!
> >
> > _______________________________________________
> > LARTC mailing list / LARTC@mailman.ds9a.nl
> > http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
> >
>
>
> --
> Math problems? Call 1-800-[(10x)(13i)^2]-[sin(xy)/2.362x]
>
>
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
>
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 10+ messages in thread