From: Askar Ali Khan <askarali@gmail.com>
To: netfilter <netfilter@lists.netfilter.org>
Subject: Re: track bandwith used
Date: Thu, 1 Jul 2004 12:01:01 +0500 [thread overview]
Message-ID: <a0f69e504070100011e5decdf@mail.gmail.com> (raw)
In-Reply-To: <200406302303.05668.Antony@Soft-Solutions.co.uk>
MRTG is very good for monitoring bandwidth utiliization, web interface
is very cool it shows your inbound and outbound traffic graphically.
http://people.ee.ethz.ch/~oetiker/webtools/mrtg/
is a good place learning about MRTG and
http://people.ee.ethz.ch/~oetiker/webtools/mrtg/mrtg-unix-guide.html
is a very nice walk through to install and configure mrtg on unix, linux
regards
On Wed, 30 Jun 2004 23:03:05 +0100, Antony Stone
<antony@soft-solutions.co.uk> wrote:
>
> On Wednesday 30 June 2004 7:46 pm, Peter Marshall wrote:
>
> > yes it does. Thank you very much. I have been looking for an explanation
> > like that on the net. :)
> >
> > Do you have a link to where this netfilter documentation is ?
>
> These might help fill in a few more details:
>
> http://iptables-tutorial.frozentux.net/iptables-tutorial.html#USERLANDSTATES
> http://www.sns.ias.edu/~jns/security/iptables/iptables_conntrack.html
>
> Antony.
>
> > ----- Original Message -----
> > From: "Antony Stone" <Antony@Soft-Solutions.co.uk>
> > To: "netfilter" <netfilter@lists.netfilter.org>
> > Sent: Wednesday, June 30, 2004 2:07 PM
> > Subject: Re: track bandwith used
> >
> > On Wednesday 30 June 2004 5:51 pm, Peter Marshall wrote:
> > > You could make a connection out to a remote server. That remote server
> > > might try to make a connection back to us that has nothing to do with the
> > > reason we connected to them.
> >
> > Such a connection would not be regarded as RELATED by the netfilter code.
> >
> > > But the server may see it as related and allow it.
> >
> > I think you should read about netfilter's definition of RELATED. It
> > doesn't
> > just mean "any packet which comes back from an IP address we're already
> > talking to".
> >
> > For example, I said that FTP data connections were RELATED to the FTP
> > control
> > connection - but that is only if you have loaded the FTP Conntrack Helper
> > module, or compiled FTP Conntrack support into your kernel. That helper
> > is what RELATEs the two parts of FTP together in netfilter.
> >
> > Basically, if you don't have a helper module which understands why a
> > connection should be RELATED to another one, then it won't be.
> >
> > Arbitrary packets from IP addresses which happen to be part of an
> > ESTABLISHED
> > connection don't count - they will be seen as NEW incoming connections, and
> > make their own way through your ruleset (until they are persumably
> > DROPped), having no assiciation whatever to anything else which may be in
> > your connection tracking table.
> >
> > Hope this clarifies things?
> >
> > Regards,
> >
> > Antony.
>
> --
> The truth is rarely pure, and never simple.
>
> - Oscar Wilde
>
>
>
> Please reply to the list;
> please don't CC me.
>
>
next prev parent reply other threads:[~2004-07-01 7:01 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-06-30 13:07 track bandwith used Peter Marshall
2004-06-30 13:41 ` Antony Stone
2004-06-30 14:07 ` Peter Marshall
2004-06-30 16:17 ` Antony Stone
2004-06-30 16:51 ` Peter Marshall
2004-06-30 17:07 ` Antony Stone
2004-06-30 18:46 ` Peter Marshall
2004-06-30 22:03 ` Antony Stone
2004-07-01 7:01 ` Askar Ali Khan [this message]
-- strict thread matches above, loose matches on Subject: below --
2004-06-30 13:32 Piszcz, Justin Michael
2004-06-30 14:07 Aldo Lagana
2004-06-30 16:55 Antony Stone
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=a0f69e504070100011e5decdf@mail.gmail.com \
--to=askarali@gmail.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox