Re: [LARTC] Trafic monitor

[Morten Nilsen <morten@nilsen.com>]

[-- Attachment #1: Type: text/plain, Size: 1263 bytes --]

Thilo Schulz wrote:
> On Wednesday 16 June 2004 09:51, Ionut Gogu wrote:
>>  I search for a tool show-me on real time the trafic made by all/one IPon
>> the interface eth1
>
> I'm working on one _RIGHT_NOW_ and expect it to be usable today.
> It will be configurable over a webinterface, and will manipulate the iptables 
> using a small setuid C-Program I wrote. (I know, setuid root sucks, but 
> you'll have to make sure noone else on this server can access or run the 
> executable file using the webserver .. that's your job.)
> It uses ulogd and stores the traffic in a webinterface, it also does update 
> the statistics database once a given limit of traffic has been reached, or a 
> certain timeout has been hit. I might give out a usable version tomorrow, but 
> I cannot guarantee for its bugfreeness. Though, most of the parts are done 
> and they also seem to work the way I want them to.
> Plus, it won't destroy any already-present firewall setups.

I find that thing intriguing, but I have a couple questions;

- How will your solution scale? can it handle 200Mb traffic full duplex
  on a Xeon 2.8GHz without choking? what about 100Mb on an AMD 800MHz?

- Could it affect latency?

- why not use sudo instead of setuid root?

Cheers,
-- 
Morten

[-- Attachment #2: S/MIME Cryptographic Signature --]
[-- Type: application/x-pkcs7-signature, Size: 3170 bytes --]