[LARTC] tools for traffic monitoring

[LARTC] tools for traffic monitoring

[Andreas Hasenack]

Hi all,

are there any tools (besides ntop) which you guys use to monitor
traffic, service by service?

mrtg is not enough, I want something that can show me traffic on
a service by service basis, and from/to which host. I guess
ntop is quite complete in this area, but is there anything else?

Thanks

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

RE: [LARTC] tools for traffic monitoring

[Meehan, Francois]

I really like iptraf (http://iptraf.seul.org/).  Simple, very convenient for
real-time stats.

-----Original Message-----
From: Andreas Hasenack [mailto:andreas@conectiva.com.br]
Sent: January 21, 2003 1:24 PM
To: lartc@mailman.ds9a.nl
Subject: [LARTC] tools for traffic monitoring


Hi all,

are there any tools (besides ntop) which you guys use to monitor
traffic, service by service?

mrtg is not enough, I want something that can show me traffic on
a service by service basis, and from/to which host. I guess
ntop is quite complete in this area, but is there anything else?

Thanks

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] tools for traffic monitoring

[Andreas Hasenack]

Em Tue, Jan 21, 2003 at 01:29:27PM -0500, Meehan, Francois escreveu:
> I really like iptraf (http://iptraf.seul.org/).  Simple, very convenient for
> real-time stats.

Can it keep statistics as well? On file?

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

RE: [LARTC] tools for traffic monitoring

[Morten Isaksen]

Check out http://wipl-wrr.sourceforge.net/wipl.html


--
Morten Isaksen
misak@aub.dk - http://www.aub.dk/~misak
 

> -----Original Message-----
> From: lartc-admin@mailman.ds9a.nl [mailto:lartc-admin@mailman.ds9a.nl] On
> Behalf Of Andreas Hasenack
> Sent: 21. januar 2003 19:24
> To: lartc@mailman.ds9a.nl
> Subject: [LARTC] tools for traffic monitoring
> 
> Hi all,
> 
> are there any tools (besides ntop) which you guys use to monitor
> traffic, service by service?
> 
> mrtg is not enough, I want something that can show me traffic on
> a service by service basis, and from/to which host. I guess
> ntop is quite complete in this area, but is there anything else?
> 
> Thanks
> 
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

RE: [LARTC] tools for traffic monitoring

[Serge Maandag]

I must admit I've never seen a completly satisfying solution.
There are lots of building blocks out there, but few complete solutions.

- ntop with the rrdtool plugin should do nice.
- Netramet is great at accounting.
- flowscan reports netflow info through rrdtool graphics.
- Caida sums up a few solutions here:
http://www.caida.org/tools/taxonomy/workload.xml#realtimetraf

Serge Maandag


-----Original Message-----
From: Andreas Hasenack [mailto:andreas@conectiva.com.br] 
Sent: Tuesday, January 21, 2003 7:24 PM
To: lartc@mailman.ds9a.nl
Subject: [LARTC] tools for traffic monitoring


Hi all,

are there any tools (besides ntop) which you guys use to monitor
traffic, service by service?

mrtg is not enough, I want something that can show me traffic on
a service by service basis, and from/to which host. I guess
ntop is quite complete in this area, but is there anything else?

Thanks

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] tools for traffic monitoring

[mingching.tiew]

I would be glad if someone could point me where can I get the traffic
data on Linux, preferrably on the '/proc' file system. Studying data
based on a device in total is not sufficient for me.

I would like to do a measurement of the qdisc's which I implemented to
check how effective they are, much like the author of HTB have 
presented in his user guide. 

Appreciate someone could point me where in the '/proc' file system where
these data could be gathered.

Rgds.
----- Original Message ----- 
From: "Serge Maandag" <serge.maandag@staff.zeelandnet.nl>
To: "Andreas Hasenack" <andreas@conectiva.com.br>; <lartc@mailman.ds9a.nl>
Sent: Thursday, January 23, 2003 7:34 PM
Subject: RE: [LARTC] tools for traffic monitoring


I must admit I've never seen a completly satisfying solution.
There are lots of building blocks out there, but few complete solutions.

- ntop with the rrdtool plugin should do nice.
- Netramet is great at accounting.
- flowscan reports netflow info through rrdtool graphics.
- Caida sums up a few solutions here:
http://www.caida.org/tools/taxonomy/workload.xml#realtimetraf

Serge Maandag





_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] tools for traffic monitoring

[Stef Coene]

On Friday 24 January 2003 02:40, mingching.tiew@redtone.com wrote:
> I would be glad if someone could point me where can I get the traffic
> data on Linux, preferrably on the '/proc' file system. Studying data
> based on a device in total is not sufficient for me.
>
> I would like to do a measurement of the qdisc's which I implemented to
> check how effective they are, much like the author of HTB have
> presented in his user guide.
I wrote some scripts for long term graphing and a script for real time 
logging.  You can find them all on www.docum.org.  (gui : long term logging, 
monitorl : real time monitoring).  They work fine for me.

> Appreciate someone could point me where in the '/proc' file system where
> these data could be gathered.
There is no tc interface for the /proc interface.

Stef

-- 

stef.coene@docum.org
 "Using Linux as bandwidth manager"
     http://www.docum.org/
     #lartc @ irc.oftc.net

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] tools for traffic monitoring

[Ming-Ching Tiew]

I would like to check it out but The download link is
not working, can be clicked !!!


----- Original Message -----
From: "Stef Coene" <stef.coene@docum.org>
To: <mingching.tiew@redtone.com>;
<lartc@mailman.ds9a.nl>
Sent: Saturday, January 25, 2003 1:37 AM
Subject: Re: [LARTC] tools for traffic monitoring


> I wrote some scripts for long term graphing and a
script for real time
> logging.  You can find them all on www.docum.org. 
(gui : long term
logging,
> monitorl : real time monitoring).  They work fine
for me.


__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] tools for traffic monitoring

[Stef Coene]

On Saturday 25 January 2003 03:20, Ming-Ching Tiew wrote:
> I would like to check it out but The download link is
> not working, can be clicked !!!
Do you mean the download of the gui or something else?  I think I corrected 
the problem.  Can you try again?

I have a problem with my ISP at home.  I downloaded too much and now I have a 
limit bandwidth, 3kbyte/s or so :(.  So if you go to home.docum.org it can be 
very slow. But www.docum.org should be fine.

Stef

-- 

stef.coene@docum.org
 "Using Linux as bandwidth manager"
     http://www.docum.org/
     #lartc @ irc.oftc.net

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] tools for traffic monitoring

[mingching.tiew]

Correct me if I am wrong, your idea of stats collection is based on
iptables. This is beautiful by itself as it is directly related to firewall
rules.
On the other hand, if one's purpose is to measure qdisc/classses,  wouldn't
it be better to use 'tc' , much like those explained in HTB user guide
chapter 7  ?

Examples, tc -s -d qdisc show dev eth0
                tc -s -d class show dev eth0
       etc.

In any case, whether is using tc or iptables, it will require a fork to
collect
results. If I need to run it continuously, any words of advise regarding
avoiding excess load ?

Regards.
----- Original Message -----
From: "Stef Coene" <stef.coene@docum.org>
To: <mingching.tiew@redtone.com>; <lartc@mailman.ds9a.nl>
Sent: Saturday, January 25, 2003 1:37 AM
Subject: Re: [LARTC] tools for traffic monitoring


> I wrote some scripts for long term graphing and a script for real time
> logging.  You can find them all on www.docum.org.  (gui : long term
logging,
> monitorl : real time monitoring).  They work fine for me.
>
> > Appreciate someone could point me where in the '/proc' file system where
> > these data could be gathered.
> There is no tc interface for the /proc interface.
>
> Stef
>
> --
>
> stef.coene@docum.org
>  "Using Linux as bandwidth manager"
>      http://www.docum.org/
>      #lartc @ irc.oftc.net
>
>
>


_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] tools for traffic monitoring

[Stef Coene]

On Monday 27 January 2003 02:38, mingching.tiew@redtone.com wrote:
> Correct me if I am wrong, your idea of stats collection is based on
> iptables. This is beautiful by itself as it is directly related to firewall
> rules.
> On the other hand, if one's purpose is to measure qdisc/classses,  wouldn't
> it be better to use 'tc' , much like those explained in HTB user guide
> chapter 7  ?
>
> Examples, tc -s -d qdisc show dev eth0
>                 tc -s -d class show dev eth0
>        etc.
>
> In any case, whether is using tc or iptables, it will require a fork to
> collect
> results. If I need to run it continuously, any words of advise regarding
> avoiding excess load ?
I have some scripts to do this.  I have a iptables and tc version.  I have a 
scirpt I use to monitor the tc bandwidth and this executes the tc -s commands 
each second.  And generates allmost no overhead.

Iptables can also be used to monitor traffic within a class to see if you have 
to fine tune your htb setup.

Stef

-- 

stef.coene@docum.org
 "Using Linux as bandwidth manager"
     http://www.docum.org/
     #lartc @ irc.oftc.net

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/