Re: Iptables logs on High bandwidth traffic network

[Steven M Campbell <Netfilter@SCampbell.net>]

bharathi wrote:

>Hi all,
>        I am planning to implement iptables log feature on a server
>machine(Dual xeon processor,Intel e100 cards,80GB SCSI and 2GB RAM)
>which is running in bridge mode (On RH 7.3).The average traffic on this
>machine is vary from 40-60Mbps.Hence I require some suggestion for some
>my questions like,
>
>1) On this High traffic the kernel will be stable/crash ?
>2) What would be the CPU Load and the server is able to do this job
>without any pain ?
>3) Up to how much traffic the iptables/kernel can able to handle without
>any issue and what should I do additionally if I need the
>   iptable-log should handle this much traffic?
>
>
>Advance thanks for your suggestion and pointers.
>
>bharthix.   
>         
>  
>
Along with other advice offered, you may wish to take a look at argus 
and ntop which are packages that collect nice summary information from 
ethernet traffic.  They may be appropos to your goal.