From: Thomas Fjellstrom <thomas@fjellstrom.ca>
To: Alexander Clouter <alex@digriz.org.uk>
Cc: linux-kernel@vger.kernel.org
Subject: Re: low overhead packet capturing on linux
Date: Wed, 1 Dec 2010 03:18:25 -0700 [thread overview]
Message-ID: <201012010318.25133.thomas@fjellstrom.ca> (raw)
In-Reply-To: <1lghs7-l16.ln1@chipmunk.wormnet.eu>
On December 1, 2010, you wrote:
> Thomas Fjellstrom <thomas@fjellstrom.ca> wrote:
> > I'm working on a little tool to monitor and measure bandwidth use on a vm
> > host, down to keeping track of all guest and host bandwidth, including,
> > eventually per layer7 protocol use.
>
> ...iptables? You get packet and byte counters there for free and you
> can have a 'web, smtp, $service[0], $service[1], ... , other' easily
> enough.
Not with full layer7 support these days. None of the old things like pp2p or
l7filter will even apply to anything remotely resembling a recent kernel.
Also I'm not sure it'll dynamically keep track of hosts. My solution will
track all hosts it sees. Where as iptables would be somewhat manual.
> Five to eight years ago we (an ISP) used this at a previous workplace of
> mine to do xDSL traffic accounting for our users.
>
> Cheers
--
Thomas Fjellstrom
thomas@fjellstrom.ca
next prev parent reply other threads:[~2010-12-01 10:18 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-12-01 0:28 low overhead packet capturing on linux Thomas Fjellstrom
2010-12-01 9:21 ` Alexander Clouter
2010-12-01 10:18 ` Thomas Fjellstrom [this message]
2010-12-01 12:19 ` Pekka Pietikainen
2010-12-01 20:28 ` Thomas Fjellstrom
2010-12-02 14:49 ` Henrique de Moraes Holschuh
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=201012010318.25133.thomas@fjellstrom.ca \
--to=thomas@fjellstrom.ca \
--cc=alex@digriz.org.uk \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.