Re: netfilter stats, info and resources usage

[Sandro Tosi <sandro.tosi@register.it>]

Hi Jesper,

On 10/28/2010 12:28 PM, Jesper Dangaard Brouer wrote:
> On Wed, 2010-10-27 at 16:42 +0200, Sandro Tosi wrote:
>> we are using quite a lot iptables and we'd like to gather some
>> stats/information to "what's doing" and hopefully also an idea of the
>> resources used by it (in particular cpu and ram).
>>
>> Probably my google search karma is very low today, given the only
>> reference to CPU usage I could find was vague refs to softirq data, and
>> for stats some links like:
>>
>> 3. http://people.netfilter.org/hawk/DDoS/2010-04-12__001/list.html
>>
>> 3 is very interesting, Jesper: how did you generate it? :)
>
> I use the tool "rrdcollect" to sample a lot of different proc values.
>
> See the rrdcollect.conf config here:
> http://people.netfilter.org/hawk/DDoS/rrdcollect_scripts/rrdcollect.conf
>
> The RRD data files are created by a perl script.
>
> I have put the perl script here:
> http://people.netfilter.org/hawk/DDoS/rrdcollect_scripts/rrdcollect-create-datafiles.pl
>
> I use the tool 'drraw' to show the graph data, but I have not uploaded
> those files... Don't know if its the right tool for the job, but it was
> very easy to change things to start with, then when the number of graphs
> grew, it sort of got annoying to maintain via drraw.

Thanks a lot for sharing, I'll definitely look at this! but... is there 
some docs about what those values are? :) If I look at kernel 
Documentation/filesystems/proc.txt there's almost no doc about /proc/net 
let alone /proc/net/stat or conntrack.

Thanks,
-- 
Sandro Tosi
Product Engineer
Linux based Solutions
Hosting Products
R&D | Dada.pro
sandro.tosi@register.it