From: Askar Ali Khan <askarali@gmail.com>
To: netfilter <netfilter@lists.netfilter.org>
Subject: Re: track bandwith used
Date: Thu, 1 Jul 2004 12:01:01 +0500 [thread overview]
Message-ID: <a0f69e504070100011e5decdf@mail.gmail.com> (raw)
In-Reply-To: <200406302303.05668.Antony@Soft-Solutions.co.uk>
MRTG is very good for monitoring bandwidth utiliization, web interface
is very cool it shows your inbound and outbound traffic graphically.
http://people.ee.ethz.ch/~oetiker/webtools/mrtg/
is a good place learning about MRTG and
http://people.ee.ethz.ch/~oetiker/webtools/mrtg/mrtg-unix-guide.html
is a very nice walk through to install and configure mrtg on unix, linux
regards
On Wed, 30 Jun 2004 23:03:05 +0100, Antony Stone
<antony@soft-solutions.co.uk> wrote:
>
> On Wednesday 30 June 2004 7:46 pm, Peter Marshall wrote:
>
> > yes it does. Thank you very much. I have been looking for an explanation
> > like that on the net. :)
> >
> > Do you have a link to where this netfilter documentation is ?
>
> These might help fill in a few more details:
>
> http://iptables-tutorial.frozentux.net/iptables-tutorial.html#USERLANDSTATES
> http://www.sns.ias.edu/~jns/security/iptables/iptables_conntrack.html
>
> Antony.
>
> > ----- Original Message -----
> > From: "Antony Stone" <Antony@Soft-Solutions.co.uk>
> > To: "netfilter" <netfilter@lists.netfilter.org>
> > Sent: Wednesday, June 30, 2004 2:07 PM
> > Subject: Re: track bandwith used
> >
> > On Wednesday 30 June 2004 5:51 pm, Peter Marshall wrote:
> > > You could make a connection out to a remote server. That remote server
> > > might try to make a connection back to us that has nothing to do with the
> > > reason we connected to them.
> >
> > Such a connection would not be regarded as RELATED by the netfilter code.
> >
> > > But the server may see it as related and allow it.
> >
> > I think you should read about netfilter's definition of RELATED. It
> > doesn't
> > just mean "any packet which comes back from an IP address we're already
> > talking to".
> >
> > For example, I said that FTP data connections were RELATED to the FTP
> > control
> > connection - but that is only if you have loaded the FTP Conntrack Helper
> > module, or compiled FTP Conntrack support into your kernel. That helper
> > is what RELATEs the two parts of FTP together in netfilter.
> >
> > Basically, if you don't have a helper module which understands why a
> > connection should be RELATED to another one, then it won't be.
> >
> > Arbitrary packets from IP addresses which happen to be part of an
> > ESTABLISHED
> > connection don't count - they will be seen as NEW incoming connections, and
> > make their own way through your ruleset (until they are persumably
> > DROPped), having no assiciation whatever to anything else which may be in
> > your connection tracking table.
> >
> > Hope this clarifies things?
> >
> > Regards,
> >
> > Antony.
>
> --
> The truth is rarely pure, and never simple.
>
> - Oscar Wilde
>
>
>
> Please reply to the list;
> please don't CC me.
>
>
next prev parent reply other threads:[~2004-07-01 7:01 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-06-30 13:07 track bandwith used Peter Marshall
2004-06-30 13:41 ` Antony Stone
2004-06-30 14:07 ` Peter Marshall
2004-06-30 16:17 ` Antony Stone
2004-06-30 16:51 ` Peter Marshall
2004-06-30 17:07 ` Antony Stone
2004-06-30 18:46 ` Peter Marshall
2004-06-30 22:03 ` Antony Stone
2004-07-01 7:01 ` Askar Ali Khan [this message]
-- strict thread matches above, loose matches on Subject: below --
2004-06-30 13:32 Piszcz, Justin Michael
2004-06-30 14:07 Aldo Lagana
2004-06-30 16:55 Antony Stone
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=a0f69e504070100011e5decdf@mail.gmail.com \
--to=askarali@gmail.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.