From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mart Frauenlob Subject: Re: iptables for bandwidth tracking Date: Wed, 06 Jan 2010 14:34:05 +0100 Message-ID: <4B44914D.4060300@chello.at> References: <4B44078D.4000103@twentyten.org> Reply-To: netfilter@vger.kernel.org Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <4B44078D.4000103@twentyten.org> Sender: netfilter-owner@vger.kernel.org List-ID: Content-Type: text/plain; charset="us-ascii" To: netfilter@vger.kernel.org On 06.01.2010 05:16, netfilter-owner@vger.kernel.org wrote: > Hey guys, > > Our servers are in a managed hosting solution where we do not have > access to our switch. We have a lot of users that use our VPN solution > and I'd like to better track their bandwidth usage. I'm considering two > options for this: > > - Using one of the many libpcap daemons to monitor and record traffic > patterns > - Use iptables > > Each VPN node has the possibility of 64,000 IP addresses so if I used > iptables, I'd need to create iptables rules for each of those IP > addresses. That seems silly to me, but am I better off doing that than > running a daemon that at the end of the day will basically do the same > thing? Thanks in advance. > > You might take a look at the ACCOUNT target from xtables-addons. http://xtables-addons.sourceforge.net/ regards Mart