how to monitor the connection on NAT...

how to monitor the connection on NAT...

[jacob]

[-- Attachment #1: Type: text/plain, Size: 234 bytes --]

hi all,
i use iptables to implement the nat in my network envirement,
i can use "netstat" to monitor the connection of the nat box, 
but how do i monitor the masqueraded connections on the nat box ?

Thanks in advance.
jacob


[-- Attachment #2: Type: text/html, Size: 773 bytes --]

(no subject)

[Matt Walkowiak]

[-- Attachment #1: Type: text/plain, Size: 973 bytes --]

I was wondering if something exists that can do what I want for netfilter.

In the WatchGuard land, there is a very neat program called HostWatch.  It has two columns: One for Outside and one for Inside.  Then, it draws a line from one column to the other for each connection.  It also refreshes itself about once every second.

Let's say you have a web server on the inside of your firewall, and 10 people are currently hitting it.  HostWatch would show 10 lines (each from a seperate IP addy, resolved if it can find it) drawn to the one ip addy of the web server.

The nice thing about HostWatch is you can see exactly what is happening now.

Now, I generally dont run any kind of X-windows system on my Linux boxes, so it would be nice to get a "text based" version of what I'm looking for, however, if a nice program existed that needed X to run, I'd seriously consider installing X windows.

Anyway, thanks in advance for your responces!

Matt Walkowiak

[-- Attachment #2: Type: text/html, Size: 1898 bytes --]

Re: (no subject)

[Jack Bowling]

** Reply to message from Matt Walkowiak <matt@inetdvd.com> on Wed, 05 Jun 2002 23:24:25 -0500


> I was wondering if something exists that can do what I want for netfilter.
> 
> In the WatchGuard land, there is a very neat program called HostWatch.  It has two columns: One for Outside and one for Inside.  Then, it draws a line from one column to the other for each connection.  It also refreshes itself about once every second.
> 
> Let's say you have a web server on the inside of your firewall, and 10 people are currently hitting it.  HostWatch would show 10 lines (each from a seperate IP addy, resolved if it can find it) drawn to the one ip addy of the web server.
> 
> The nice thing about HostWatch is you can see exactly what is happening now.
> 
> Now, I generally dont run any kind of X-windows system on my Linux boxes, so it would be nice to get a "text based" version of what I'm looking for, however, if a nice program existed that needed X to run, I'd seriously consider installing X windows.
> 
> Anyway, thanks in advance for your responces!

Hey, Matt. Go to http://freshmeat.net and do a search for IPTSTATE. It is a top-like text based app that will monitor your connection state.

jb

-- 
Jack Bowling
mailto: jbinpg@shaw.ca