Iptables, php , realtime bandwidth usage

Iptables, php , realtime bandwidth usage

[Robert Becskei]

Hello everyone,


 I wonder if someone could help me find something similiar to this :

 -can monitor bandwidthd usage in real time (php maybe...)

 -if possible it could resolve ip address to dns name ? ( I have setup my own dynamicdns dhcp server combo )

 

 I found a tool if someone would like to try it, but it is not a solution to my current problem.

 http://web4.hm/index.php?http://web4.hm/html/webserver_root.html


 Sincerely
 Robert B

Re: Iptables, php , realtime bandwidth usage

[Jose Maria Lopez Hernandez]

El jue, 05-05-2005 a las 12:39 +0200, Robert Becskei escribió:
> Hello everyone,
> 
> 
>  I wonder if someone could help me find something similiar to this :
> 
>  -can monitor bandwidthd usage in real time (php maybe...)
> 
>  -if possible it could resolve ip address to dns name ? ( I have setup my own dynamicdns dhcp server combo )
> 
>  
> 
>  I found a tool if someone would like to try it, but it is not a solution to my current problem.
> 
>  http://web4.hm/index.php?http://web4.hm/html/webserver_root.html

Best think I know to monitor bandwidth is Ntop, but it's not realtime,
it's based in rrdtool so you have data each some minutes.

To monitor realtime bandwidth you could use pmacct in a Cacti script,
and watch the results graphically with a browser.

>  Sincerely
>  Robert B

Regards.

-- 

Jose Maria Lopez Hernandez
Director Tecnico de bgSEC
jkerouac@bgsec.com
bgSEC Seguridad y Consultoria de Sistemas
http://www.bgsec.com
ESPAÑA

The only people for me are the mad ones -- the ones who are mad to live,
mad to talk, mad to be saved, desirous of everything at the same time,
the ones who never yawn or say a commonplace thing, but burn, burn, burn
like fabulous yellow Roman candles.
                -- Jack Kerouac, "On the Road"

Re: Iptables, php , realtime bandwidth usage

[Robert Becskei]

Hello,

 thank you for the fast response, I've tried ntop already, its to much for 
this thing.

 I would only like to see that user_a(b,c,d,e,f,g...etc) is currently 
downloading and uploading at kbyte/s (not really important if not possible 
in realtime)

 it would be nice to see via a webpage that what is actualy happening on a 
per user basis, without even logging anything.

 Sincerely
 Robert B

----- Original Message ----- 
From: "Jose Maria Lopez Hernandez" <jkerouac@bgsec.com>
To: <netfilter@lists.netfilter.org>
Sent: Thursday, May 05, 2005 13:18
Subject: Re: Iptables, php , realtime bandwidth usage


El jue, 05-05-2005 a las 12:39 +0200, Robert Becskei escribió:
> Hello everyone,
>
>
>  I wonder if someone could help me find something similiar to this :
>
>  -can monitor bandwidthd usage in real time (php maybe...)
>
>  -if possible it could resolve ip address to dns name ? ( I have setup my 
> own dynamicdns dhcp server combo )
>
>
>
>  I found a tool if someone would like to try it, but it is not a solution 
> to my current problem.
>
>  http://web4.hm/index.php?http://web4.hm/html/webserver_root.html

Best think I know to monitor bandwidth is Ntop, but it's not realtime,
it's based in rrdtool so you have data each some minutes.

To monitor realtime bandwidth you could use pmacct in a Cacti script,
and watch the results graphically with a browser.

>  Sincerely
>  Robert B

Regards.

-- 

Jose Maria Lopez Hernandez
Director Tecnico de bgSEC
jkerouac@bgsec.com
bgSEC Seguridad y Consultoria de Sistemas
http://www.bgsec.com
ESPAÑA

The only people for me are the mad ones -- the ones who are mad to live,
mad to talk, mad to be saved, desirous of everything at the same time,
the ones who never yawn or say a commonplace thing, but burn, burn, burn
like fabulous yellow Roman candles.
                -- Jack Kerouac, "On the Road"

Re: Iptables, php , realtime bandwidth usage

[Taylor, Grant]

>  I wonder if someone could help me find something similiar to this :
> 
>  -can monitor bandwidthd usage in real time (php maybe...)
> 
>  -if possible it could resolve ip address to dns name ? ( I have setup my own dynamicdns dhcp server combo )

You may want to look in to some of the SNMP monitoring tools (two come to mind MRTG and Cacti) as they will do a lot of the graphics and graphical web access for you.  However to do this you will either need a manged + SNMP capable switch to watch which port each computer is plugged in to or you will need to set up some sort of rules for counting on your router / firewall and then set up some sort of SNMP package on the router / firewall to point your SNMP monitoring app at.

As far as getting close to real time stats you could set up some iptables rules to easily count what passes through the router in each direction for each client.  You may want to look at the accounting matches as they are designed explicitly for this or just basic packet matching rules will work too.  One word to the wise (unless there is a way to defeat this) the bytes and packet counters on iptables output will start rounding at some point, I'm not sure where, so you may want to pass the -Z option to zero out the counters periodically (each polling cycle) to make sure that you get all packets and not loose them to rounding.



Grant. . . .

Re: Iptables, php , realtime bandwidth usage

[Glaucius Djalma Pereira Junior]

use it 

http://ifmonitor.preteritoimperfeito.com/



On 5/5/05, Taylor, Grant <gtaylor@riverviewtech.net> wrote:
> >  I wonder if someone could help me find something similiar to this :
> >
> >  -can monitor bandwidthd usage in real time (php maybe...)
> >
> >  -if possible it could resolve ip address to dns name ? ( I have setup my own dynamicdns dhcp server combo )
> 
> You may want to look in to some of the SNMP monitoring tools (two come to mind MRTG and Cacti) as they will do a lot of the graphics and graphical web access for you.  However to do this you will either need a manged + SNMP capable switch to watch which port each computer is plugged in to or you will need to set up some sort of rules for counting on your router / firewall and then set up some sort of SNMP package on the router / firewall to point your SNMP monitoring app at.
> 
> As far as getting close to real time stats you could set up some iptables rules to easily count what passes through the router in each direction for each client.  You may want to look at the accounting matches as they are designed explicitly for this or just basic packet matching rules will work too.  One word to the wise (unless there is a way to defeat this) the bytes and packet counters on iptables output will start rounding at some point, I'm not sure where, so you may want to pass the -Z option to zero out the counters periodically (each polling cycle) to make sure that you get all packets and not loose them to rounding.
> 
> 
> Grant. . . .
> 
> 


-- 
Glaucius Djalma Pereira Junior
glaucius@gmail.com

Re: Iptables, php , realtime bandwidth usage

[Robert Becskei]

Hello,

 thanx for all the responses, but those tools arent exactly what I'm looking 
for (and maybe I need to practice english a bit more as well :) ).

 example :

 computers----router----proxy---gateway---internet

 computer1 192.168.1.10
 computer2 192.168.1.11
 computer3 192.168.1.12

 at the router I would like to see that at that moment how much bandwithd is 
being used.
 for example I would like to see something like this (example) :

 computer1  download 10kbyte/s  upload 1.5kbyte/s
 computer2 download 0kbyte/s upload 0kbyte/s
 computer3 download 20kbyte/s upload 2kbyte/s

 my problem is (I currently use cacti, and bigsister), that I cannot see how 
is my bandwidthd currenly used on a per host basis.
 I can see graphs about that my current download and upload is this and that 
(overall), but I would like to see something as shown
 above in the example, I wonder if there is some tool for that ?

Sincerely
Robert Becskei


----- Original Message ----- 
From: "Glaucius Djalma Pereira Junior" <glaucius@gmail.com>
To: "Taylor, Grant" <gtaylor@riverviewtech.net>
Cc: <netfilter@lists.netfilter.org>
Sent: Thursday, May 05, 2005 19:21
Subject: Re: Iptables, php , realtime bandwidth usage


use it

http://ifmonitor.preteritoimperfeito.com/



On 5/5/05, Taylor, Grant <gtaylor@riverviewtech.net> wrote:
> >  I wonder if someone could help me find something similiar to this :
> >
> >  -can monitor bandwidthd usage in real time (php maybe...)
> >
> >  -if possible it could resolve ip address to dns name ? ( I have setup 
> > my own dynamicdns dhcp server combo )
>
> You may want to look in to some of the SNMP monitoring tools (two come to 
> mind MRTG and Cacti) as they will do a lot of the graphics and graphical 
> web access for you.  However to do this you will either need a manged + 
> SNMP capable switch to watch which port each computer is plugged in to or 
> you will need to set up some sort of rules for counting on your router / 
> firewall and then set up some sort of SNMP package on the router / 
> firewall to point your SNMP monitoring app at.
>
> As far as getting close to real time stats you could set up some iptables 
> rules to easily count what passes through the router in each direction for 
> each client.  You may want to look at the accounting matches as they are 
> designed explicitly for this or just basic packet matching rules will work 
> too.  One word to the wise (unless there is a way to defeat this) the 
> bytes and packet counters on iptables output will start rounding at some 
> point, I'm not sure where, so you may want to pass the -Z option to zero 
> out the counters periodically (each polling cycle) to make sure that you 
> get all packets and not loose them to rounding.
>
>
> Grant. . . .
>
>


-- 
Glaucius Djalma Pereira Junior
glaucius@gmail.com

Re: Iptables, php , realtime bandwidth usage

[Abdul-Wahid Paterson]

Hi Robert,

Some options for you...

1. Install snmp service on all the machines. This can be done for
windows/linux machines and you can then plot the bandwidth with
something like cacti. Rather than just plotting your firewall which
won't give you the host break down you want.

2. iptraf is a console app that will allow you to get a pretty good
break down of what is currently happening.

3. Using iptables and ULOG is prob not a good idea unless you have a
very restrictive set of packets you actually want to look at. You
could though use ULOG with a web based app (search freshmeant for ulog
and you will find a couple).

4. Use something like squid and squid-graph...Prob not real time
enough for you but can give you an excellent breakdown of what
everyone on the network has been up to, what sites they have gone to
and how much bandwidth they have been using.

Regards,

Abdul-Wahid




On 5/6/05, Robert Becskei <brobiwbe@stcable.co.yu> wrote:
> Hello,
> 
>  thanx for all the responses, but those tools arent exactly what I'm looking
> for (and maybe I need to practice english a bit more as well :) ).
> 
>  example :
> 
>  computers----router----proxy---gateway---internet
> 
>  computer1 192.168.1.10
>  computer2 192.168.1.11
>  computer3 192.168.1.12
> 
>  at the router I would like to see that at that moment how much bandwithd is
> being used.
>  for example I would like to see something like this (example) :
> 
>  computer1  download 10kbyte/s  upload 1.5kbyte/s
>  computer2 download 0kbyte/s upload 0kbyte/s
>  computer3 download 20kbyte/s upload 2kbyte/s
> 
>  my problem is (I currently use cacti, and bigsister), that I cannot see how
> is my bandwidthd currenly used on a per host basis.
>  I can see graphs about that my current download and upload is this and that
> (overall), but I would like to see something as shown
>  above in the example, I wonder if there is some tool for that ?
> 
> Sincerely
> Robert Becskei
> 
> 
> ----- Original Message -----
> From: "Glaucius Djalma Pereira Junior" <glaucius@gmail.com>
> To: "Taylor, Grant" <gtaylor@riverviewtech.net>
> Cc: <netfilter@lists.netfilter.org>
> Sent: Thursday, May 05, 2005 19:21
> Subject: Re: Iptables, php , realtime bandwidth usage
> 
> use it
> 
> http://ifmonitor.preteritoimperfeito.com/
> 
> On 5/5/05, Taylor, Grant <gtaylor@riverviewtech.net> wrote:
> > >  I wonder if someone could help me find something similiar to this :
> > >
> > >  -can monitor bandwidthd usage in real time (php maybe...)
> > >
> > >  -if possible it could resolve ip address to dns name ? ( I have setup
> > > my own dynamicdns dhcp server combo )
> >
> > You may want to look in to some of the SNMP monitoring tools (two come to
> > mind MRTG and Cacti) as they will do a lot of the graphics and graphical
> > web access for you.  However to do this you will either need a manged +
> > SNMP capable switch to watch which port each computer is plugged in to or
> > you will need to set up some sort of rules for counting on your router /
> > firewall and then set up some sort of SNMP package on the router /
> > firewall to point your SNMP monitoring app at.
> >
> > As far as getting close to real time stats you could set up some iptables
> > rules to easily count what passes through the router in each direction for
> > each client.  You may want to look at the accounting matches as they are
> > designed explicitly for this or just basic packet matching rules will work
> > too.  One word to the wise (unless there is a way to defeat this) the
> > bytes and packet counters on iptables output will start rounding at some
> > point, I'm not sure where, so you may want to pass the -Z option to zero
> > out the counters periodically (each polling cycle) to make sure that you
> > get all packets and not loose them to rounding.
> >
> >
> > Grant. . . .
> >
> >
> 
> --
> Glaucius Djalma Pereira Junior
> glaucius@gmail.com
> 
>

RE: Iptables, php , realtime bandwidth usage

[Ruben Cardenal]

 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

netfilter-bounces@lists.netfilter.org wrote:
> Hello everyone,
> 
> 
>  I wonder if someone could help me find something similiar to this :
> 
>  -can monitor bandwidthd usage in real time (php maybe...)

  http://rtg.sf.net

  You can setup polling even every 10 seconds if you want to :) And, of
course, select any timing period to be shown.

  Regards,

- - Ruben

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1

iQA/AwUBQnygNgcpyqBKAkY5EQJsewCdGLNqBxxxg89VPTd4KbrrFW7Oc3QAoOha
3g8qOTjzG2TTERqcywB2s58Y
=/okk
-----END PGP SIGNATURE-----

Re: Iptables, php , realtime bandwidth usage

[Jose Maria Lopez Hernandez]

El vie, 06-05-2005 a las 16:30 +0200, Robert Becskei escribió:
>  at the router I would like to see that at that moment how much bandwithd is 
> being used.
>  for example I would like to see something like this (example) :
> 
>  computer1  download 10kbyte/s  upload 1.5kbyte/s
>  computer2 download 0kbyte/s upload 0kbyte/s
>  computer3 download 20kbyte/s upload 2kbyte/s
> 
>  my problem is (I currently use cacti, and bigsister), that I cannot see how 
> is my bandwidthd currenly used on a per host basis.
>  I can see graphs about that my current download and upload is this and that 
> (overall), but I would like to see something as shown
>  above in the example, I wonder if there is some tool for that ?

You could use some SNMP agents on the computers to allow you to
monitor the outer interfaces from a script and use it in Cacti.
The linux SNMP agent gives you that data, and the Windows XP also
gives you the data.

You can use rrdtool to know the aggregated traffic or the instant
traffic at the time points you want.

> Sincerely
> Robert Becskei

Regards.
-- 

Jose Maria Lopez Hernandez
Director Tecnico de bgSEC
jkerouac@bgsec.com
bgSEC Seguridad y Consultoria de Sistemas
http://www.bgsec.com
ESPAÑA

The only people for me are the mad ones -- the ones who are mad to live,
mad to talk, mad to be saved, desirous of everything at the same time,
the ones who never yawn or say a commonplace thing, but burn, burn, burn
like fabulous yellow Roman candles.
                -- Jack Kerouac, "On the Road"