Accounting

Accounting

[Andrew Barbara]

Hi,
Does iptables keep a file that keeps track of accounting information?  I 
know ipchains did.
Thanks
Andrew 

accounting

[Klaus Boehm]

Hi,

I want use the iptables for accounting.
1. How looks the iptable rules.
2. In which file under the proc filesystem I could read the counter values.

Thanks for any hints.


Klaus

-- 


ewt gmbh
data management group
tel: ++49 821 3106 319
fax: ++49 821 3106 399
url: www.ewt.de

Re: accounting

[Ralf Spenneberg]

Hi,

Am Don, 2003-10-09 um 15.44 schrieb Klaus Boehm:
> I want use the iptables for accounting.
> 1. How looks the iptable rules.
> 2. In which file under the proc filesystem I could read the counter values.
There are probably better applications to do accounting, but if you want
to do that:
1. This rule will cover all HTTP-traffic 
iptables -A FORWARD -p tcp --port 80
2. You can read the counters using 
iptables -vnL
3. You can reset the counters using
iptables -Z

Cheers,

Ralf
-- 
Ralf Spenneberg
RHCE, RHCX

Book: Intrusion Detection für Linux Server   http://www.spenneberg.com
IPsec-Howto				     http://www.ipsec-howto.org
Honeynet Project Mirror:                     http://honeynet.spenneberg.org

accounting

[Brent Clark]

Hi

What would be the correct method for like accounting programs for like a 'pay as you go' internet.

Basically keep track users bandwidth usage, time etc.

For the guys in the ISP market, what or how would you guys go about this, or am I doomed to use a commercial
product like Checkpoint or something.

Im hoping iptables has / can do something.

Regards
Brent Clark

P.s. Wonder if monowall does some type of accounting.

RE: accounting

[Rob Sterenborg]

> What would be the correct method for like accounting programs
> for like a 'pay as you go' internet.
>
> Basically keep track users bandwidth usage, time etc.
>
> For the guys in the ISP market, what or how would you guys go
> about this, or am I doomed to use a commercial
> product like Checkpoint or something.
>
> Im hoping iptables has / can do something.

I'm not in the ISP market, but about a year ago I installed IP
accounting software on a server to see how it works. I looked and found
ipac-ng and iag in an old download directory but I can't remember which
one I got working.. The latest versions of both packages are not recent
(2004, 2005) but at the time I got one of them working.

Maybe you can do something with the below :
ipac-ng: http://sourceforge.net/project/showfiles.php?group_id=28513
ipac-ng (howto): http://martybugs.net/linux/ipac.cgi
iag: http://dev.lashout.net/iag/ (Needs Sablotron)

Really, I don't remember which one worked and what the results looked
like so I hope this is of any use.


Grts,
Rob