Re: nat & ip accounting

[Bjorn Ruberg <bjorn@ruberg.no>]

On Wed, 2003-03-26 at 22:51, Kim Jensen wrote:
> On Wednesday 26 March 2003 22:11, Rowan Reid wrote:
> > I have an answer but you also got me thinking.  A good tool to keep
> > track of traffic via ip addresses would be mrtg. However is there an
> > mrtg type tool that uses the counters in iptables rules to keep track of
> > traffic and output it in a user friendly form.
> 
> If you wish to see things in a more user friendly way (or usable way, as no 
> system is friendly :-) can be hard as you have to define what in what you 
> wish to see things!
> 
> mrtg is quite good, since you get the results on a webpage, but for tracking 
> ip specific things - I don't know, as I don't think the kernel remembers this 
> statistic. You can read per interface but not from each ip connecting to an 
> interface.

You can indeed log from each IP connecting. In fact you may read
whatever you configure iptables to log. You may end up with one heck of
a ruleset, as you need one iptables rule for every different parameter
you want to log.


Bjørn