traffic graphing?

traffic graphing?

[Dave Barnum]

What would you guys suggest for a good traffic monitoring/graphing 
sollution for a iptables (shorewall) firewall?

Re: traffic graphing?

[Les Mikesell]

On Fri, 2004-08-20 at 17:20, Dave Barnum wrote:
> What would you guys suggest for a good traffic monitoring/graphing 
> sollution for a iptables (shorewall) firewall?

I haven't used it specifically with shorewall, but cacti
http://www.raxnet.net/products/cacti/ is nice with anything
that you can monitor with snmp.  It is a php web tool to
set collection of data and view the graphs.

---
  Les Mikesell
    les@futuresource.com

Re: traffic graphing?

[Marcin Sura]

Witam

Saturday, August 21, 2004, 12:20:37 AM, you wrote:

> What would you guys suggest for a good traffic monitoring/graphing 
> sollution for a iptables (shorewall) firewall?

I'm using Lstat - http://lstat.sourceforge.net/
This is a nice interface for rrdtool, but only in Polish :(
Besides standard charts it allow you to capture stats form your
iptables rules.

And, of course you can simple try rrdtool, but playing with it takes
some time :)

-- 
Pozdrawiam
 Marcin                            mailto:slacklist@op.pl

Re: traffic graphing?

[Dave Barnum]

Also, to do this I assume you needs logs to parse through in the first 
place.. Where might these be.. do i have to turn this on somewhere?

Dave Barnum wrote:

> What would you guys suggest for a good traffic monitoring/graphing 
> sollution for a iptables (shorewall) firewall?
>
>

Re: traffic graphing?

[Thilo Schulz]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Saturday 21 August 2004 00:20, Dave Barnum wrote:
> What would you guys suggest for a good traffic monitoring/graphing
> sollution for a iptables (shorewall) firewall?

You could try out my new solution, that's up at sourceforge now and now doing 
it's job quite well, but needs MySQL as a database.
Have a look at:
http://sourceforge.net/projects/ltaccts/

It will not destroy your current firewall configuration, but create rules 
solely intended for logging, use ULOG for collecting traffic statistics. You 
can define your own categories and browse through the logs using a web 
interface.

- -- 
Thilo Schulz

My public PGP key is available at http://home.bawue.de/~arny/public_key.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBJoXfZx4hBtWQhl4RAjC/AJ9dlVQ31p4DIW+WSS4b+l53ATJsBQCgk4oS
FstTAyxAWRwCk7O8VS7U9Sc=
=boMJ
-----END PGP SIGNATURE-----

RE: traffic graphing?

[Brent Clark]

>What would you guys suggest for a good traffic monitoring/graphing 
>sollution for a iptables (shorewall) firewall?

Hi 

I use bandwidthd

The most fastest installation I have ever had encounted.

http://bandwidthd.sourceforge.net/

RE: traffic graphing?

[Jose Maria Lopez]

El mié, 25 de 08 de 2004 a las 09:00, Brent Clark escribió:
> >What would you guys suggest for a good traffic monitoring/graphing 
> >sollution for a iptables (shorewall) firewall?
> 
> Hi 
> 
> I use bandwidthd
> 
> The most fastest installation I have ever had encounted.
> 
> http://bandwidthd.sourceforge.net/

A good option is using Cacti+rrdtool to generate all kind
of graphical stats. You just have to write some scripts
to extract the data from the tables. I'm using something
similar in my firewall, but extracting the data with a
C program from the chains and then graphing it with
rrdtool.


-- 
Jose Maria Lopez Hernandez
Director Tecnico de bgSEC
jkerouac@bgsec.com
bgSEC Seguridad y Consultoria de Sistemas Informaticos
http://www.bgsec.com
ESPAÑA

The only people for me are the mad ones -- the ones who are mad to live,
mad to talk, mad to be saved, desirous of everything at the same time,
the ones who never yawn or say a commonplace thing, but burn, burn, burn
like fabulous yellow Roman candles.
                -- Jack Kerouac, "On the Road"