All of lore.kernel.org
 help / color / mirror / Atom feed
* RE: measure traffic
@ 2002-10-09 12:04 Ferry van Steen
  0 siblings, 0 replies; 8+ messages in thread
From: Ferry van Steen @ 2002-10-09 12:04 UTC (permalink / raw)
  To: Heupink, Mourik Jan C., Payal, netfilter

Whow, I wouldn't know... But perhaps it counts everything it sees, that
doesn't mean that it only sees traffic that actually needs to be
bridged. I don't think such a difference comes from firewall rules alone
though, but if it does, you might be able to pick it up in the counters
of the firewall.

Regards


-----Oorspronkelijk bericht-----
Van: Heupink, Mourik Jan C. [mailto:Heupink@INTECH.UNU.EDU] 
Verzonden: woensdag 9 oktober 2002 12:39
Aan: 'Payal'; netfilter@lists.netfilter.org
Onderwerp: RE: measure traffic

this is slightly off topic, but i'm asking anyway :)

when taking a look at the byte counters with ifconfig, i get the
following
results:

eth0      Link encap:Ethernet  HWaddr 00:60:08:6B:A2:FE
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:16181723 errors:4 dropped:0 overruns:0 frame:0
          TX packets:17970946 errors:0 dropped:0 overruns:0 carrier:0
          collisions:581668 txqueuelen:100
          RX bytes:3686193757 (3515.4 Mb)  TX bytes:1361276683 (1298.2
Mb)
          Interrupt:11 Base address:0x6000

intech007:~ # ifconfig eth1
eth1      Link encap:Ethernet  HWaddr 00:60:08:6B:A2:1A
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:18559613 errors:0 dropped:0 overruns:0 frame:0
          TX packets:16380728 errors:0 dropped:0 overruns:0 carrier:388
          collisions:184706 txqueuelen:100
          RX bytes:2205111742 (2102.9 Mb)  TX bytes:3719071392 (3546.7
Mb)
          Interrupt:9 Base address:0x6100

This machine is a bridging transparant firewall. eth1 is internet side,
and
eth0 is lan side. 

Is it correct to assume, that the firewall rules in use reduced the
incoming
traffic from 2102.9 MB to 1298.2 MB?

Isn't that too big a reduction..? Am i making a thinking error here..?

Thanks for any replies.

Yours,
Mourik Jan




^ permalink raw reply	[flat|nested] 8+ messages in thread
* RE: measure traffic
@ 2002-10-09 10:39 Heupink, Mourik Jan C.
  0 siblings, 0 replies; 8+ messages in thread
From: Heupink, Mourik Jan C. @ 2002-10-09 10:39 UTC (permalink / raw)
  To: 'Payal', netfilter

this is slightly off topic, but i'm asking anyway :)

when taking a look at the byte counters with ifconfig, i get the following
results:

eth0      Link encap:Ethernet  HWaddr 00:60:08:6B:A2:FE
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:16181723 errors:4 dropped:0 overruns:0 frame:0
          TX packets:17970946 errors:0 dropped:0 overruns:0 carrier:0
          collisions:581668 txqueuelen:100
          RX bytes:3686193757 (3515.4 Mb)  TX bytes:1361276683 (1298.2 Mb)
          Interrupt:11 Base address:0x6000

intech007:~ # ifconfig eth1
eth1      Link encap:Ethernet  HWaddr 00:60:08:6B:A2:1A
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:18559613 errors:0 dropped:0 overruns:0 frame:0
          TX packets:16380728 errors:0 dropped:0 overruns:0 carrier:388
          collisions:184706 txqueuelen:100
          RX bytes:2205111742 (2102.9 Mb)  TX bytes:3719071392 (3546.7 Mb)
          Interrupt:9 Base address:0x6100

This machine is a bridging transparant firewall. eth1 is internet side, and
eth0 is lan side. 

Is it correct to assume, that the firewall rules in use reduced the incoming
traffic from 2102.9 MB to 1298.2 MB?

Isn't that too big a reduction..? Am i making a thinking error here..?

Thanks for any replies.

Yours,
Mourik Jan


^ permalink raw reply	[flat|nested] 8+ messages in thread
* RE: measure traffic
@ 2002-10-08 23:27 Yogini Parkhi
  0 siblings, 0 replies; 8+ messages in thread
From: Yogini Parkhi @ 2002-10-08 23:27 UTC (permalink / raw)
  To: Payal, netfilter

Hi Payal,
I think you can just run cron jobs and take a snapshot of the ifconfig command or iptables -L -v  command. Then compare the outputs with dates and you will have the stats you need.

You can also zero the counters every hour if you want with iptables -Z after you save the counters for the last hour.
You can have your cron job add up packets etc. 

Hope this helps,
Yogini


-----Original Message-----
From: Payal [mailto:payal@hotpop.com]
Sent: Tuesday, October 08, 2002 11:56 AM
To: netfilter@lists.netfilter.org
Subject: Re: measure traffic

Hi,
Thanks a lot all for the mail.
Well, I was thining more on lines of traffic every hour/day/week/month
etc. Cos' then I can challenge the server farm guys that their stats are
wrong.
Well, about ipac-ng I heard it has some problems with iptables 1.2.5 and
kernel 2.4.x. Does it work properly with these two?
Thanks a lot and bye.
-Payal
On Mon, Oct 07, 2002 at 09:17:33PM +0100, Antony Stone wrote:
> On Monday 07 October 2002 7:58 pm, PayalR wrote:
>
> > Hi,
> > I have a small urgent problem. As I told you all before, I have my single
> > Linux box at a server farm where I have to pay per Mb of data transmitted.
> > I have a doubt that those guys there are cheating me. They are taking more
> > money than actual data transmitted. Can I use iptables to log all incoming
> > and outgoing data and see total incoming/outgoing data in a day/week/month?
>
> Why not just use the byte counters in ifconfig ?
>
> eg: ifconfig eth1
>
> eth1      Link encap:Ethernet  HWaddr 00:02:2D:05:3F:8D
>           inet addr:192.168.44.101  Bcast:192.168.44.255  Mask:255.255.255.0
>           UP BROADCAST NOTRAILERS RUNNING  MTU:1500  Metric:1
>           RX packets:1930 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:1950 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:100
>           RX bytes:912045 (890.6 Kb)  TX bytes:265386 (259.1 Kb)
>           Interrupt:9 Base address:0x100
>
> So this machine I'm on now has received 912045 bytes and sent 265386 bytes
> since the interface was initialised....
>
> Antony.
>
> --
>
> The difference between theory and practice is that
> in theory there is no difference, whereas in practice there is.


^ permalink raw reply	[flat|nested] 8+ messages in thread
* measure traffic
@ 2002-10-07 18:58 PayalR
  0 siblings, 0 replies; 8+ messages in thread
From: PayalR @ 2002-10-07 18:58 UTC (permalink / raw)
  To: netfilter

Hi,
I have a small urgent problem. As I told you all before, I have my single 
Linux box at a server farm where I have to pay per Mb of data transmitted.
I have a doubt that those guys there are cheating me. They are taking more 
money than actual data transmitted. Can I use iptables to log all incoming 
and outgoing data and see total incoming/outgoing data in a day/week/month?
What do i have to do? Is there any specific package available for it?
Thanks a lot and bye.
-Payal


^ permalink raw reply	[flat|nested] 8+ messages in thread
end of thread, other threads:[~2002-10-09 12:04 UTC | newest]

Thread overview: 8+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
     [not found] <200210080025.26576@.>
2002-10-07 20:17 ` measure traffic Antony Stone
2002-10-08  9:46   ` Alasdair Ramsay
2002-10-08 18:56   ` Payal
2002-10-08  7:39 ` Martijn Klingens
2002-10-09 12:04 Ferry van Steen
  -- strict thread matches above, loose matches on Subject: below --
2002-10-09 10:39 Heupink, Mourik Jan C.
2002-10-08 23:27 Yogini Parkhi
2002-10-07 18:58 PayalR

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.