calculate "new connections per second"

calculate "new connections per second"

[Gaurav Sharma]

Hello,

I am trying to find out a way to calculate the rate of "new connections per 
second" for the ip_conntrack module.  What would be a good approach for this 
problem?  Also is there an explaination available for the various statistics 
for ip_conntrack listed undet '/proc/net/stat/ip_conntrack'. 

Your will be really appreciated.  

Thanks.
Gaurav.

Re: calculate "new connections per second" (nfcan: addressed to exclusive sender for this address)

[Jim Laurino]

On 2006.03.15 10:13, Gaurav Sharma - gaurav@interacesso.pt wrote:
> Hello,
> 
> I am trying to find out a way to calculate
> the rate of "new connections per second"
> for the ip_conntrack module.
> What would be a good approach for this problem?

Are you asking how to determine
the time each connection is established
or are you asking, given this data,
how to estimate this rate.

Can you explain how you want to use the measurement?

-- 
Jim Laurino
nfcan.x.jimlaur@dfgh.net
Please reply to the list.
Only mail from the listserver reaches this address.

Re: calculate "new connections per second" (nfcan: addressed to exclusive sender for this address)

[Gaurav Sharma]

Thanks for the reply Jim.

I am using the ip_conntrack module to mark connections on a linux bridge to 
shape traffic. Sometimes if there is a DOS attack the ip_conntrack table 
overflows and the kernel starts dropping packets.  I want to measure the rate 
at which the connections are being made and being entered in the ip_conntrack 
table so if there is a spike in the rate I will know that there is a DOS 
attack going on.  I hope you can now understand my situation. I you need more 
information please let me know.

Appreciate your help.

Regards,
Gaurav.

On Wednesday 15 March 2006 23:32, Jim Laurino wrote:
> On 2006.03.15 10:13, Gaurav Sharma - gaurav@interacesso.pt wrote:
> > Hello,
> >
> > I am trying to find out a way to calculate
> > the rate of "new connections per second"
> > for the ip_conntrack module.
> > What would be a good approach for this problem?
>
> Are you asking how to determine
> the time each connection is established
> or are you asking, given this data,
> how to estimate this rate.
>
> Can you explain how you want to use the measurement?

Re: calculate "new connections per second"

[Kashif Ali Bukhari]

$iptstate may hele you !

On 3/15/06, Gaurav Sharma <gaurav@interacesso.pt> wrote:
> Hello,
>
> I am trying to find out a way to calculate the rate of "new connections per
> second" for the ip_conntrack module.  What would be a good approach for this
> problem?  Also is there an explaination available for the various statistics
> for ip_conntrack listed undet '/proc/net/stat/ip_conntrack'.
>
> Your will be really appreciated.
>
> Thanks.
> Gaurav.
>
>


--
Syed Kashif Ali Bukhari
+92-300-4295604
Network Engineer
Beaconhouse IT Services, Lahore Pakistan