From: Thomas Fjellstrom <thomas@fjellstrom.ca>
To: Alexander Clouter <alex@digriz.org.uk>
Cc: linux-kernel@vger.kernel.org
Subject: Re: low overhead packet capturing on linux
Date: Wed, 1 Dec 2010 03:18:25 -0700 [thread overview]
Message-ID: <201012010318.25133.thomas@fjellstrom.ca> (raw)
In-Reply-To: <1lghs7-l16.ln1@chipmunk.wormnet.eu>
On December 1, 2010, you wrote:
> Thomas Fjellstrom <thomas@fjellstrom.ca> wrote:
> > I'm working on a little tool to monitor and measure bandwidth use on a vm
> > host, down to keeping track of all guest and host bandwidth, including,
> > eventually per layer7 protocol use.
>
> ...iptables? You get packet and byte counters there for free and you
> can have a 'web, smtp, $service[0], $service[1], ... , other' easily
> enough.
Not with full layer7 support these days. None of the old things like pp2p or
l7filter will even apply to anything remotely resembling a recent kernel.
Also I'm not sure it'll dynamically keep track of hosts. My solution will
track all hosts it sees. Where as iptables would be somewhat manual.
> Five to eight years ago we (an ISP) used this at a previous workplace of
> mine to do xDSL traffic accounting for our users.
>
> Cheers
--
Thomas Fjellstrom
thomas@fjellstrom.ca
next prev parent reply other threads:[~2010-12-01 10:18 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-12-01 0:28 low overhead packet capturing on linux Thomas Fjellstrom
2010-12-01 9:21 ` Alexander Clouter
2010-12-01 10:18 ` Thomas Fjellstrom [this message]
2010-12-01 12:19 ` Pekka Pietikainen
2010-12-01 20:28 ` Thomas Fjellstrom
2010-12-02 14:49 ` Henrique de Moraes Holschuh
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=201012010318.25133.thomas@fjellstrom.ca \
--to=thomas@fjellstrom.ca \
--cc=alex@digriz.org.uk \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox