Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Askar Ali Khan <askarali@gmail.com>
To: netfilter <netfilter@lists.netfilter.org>
Subject: Re: track bandwith used
Date: Thu, 1 Jul 2004 12:01:01 +0500	[thread overview]
Message-ID: <a0f69e504070100011e5decdf@mail.gmail.com> (raw)
In-Reply-To: <200406302303.05668.Antony@Soft-Solutions.co.uk>

MRTG is very good for monitoring bandwidth utiliization, web interface
is very cool it shows your inbound and outbound traffic graphically.

http://people.ee.ethz.ch/~oetiker/webtools/mrtg/ 
is a good place learning about MRTG and 
http://people.ee.ethz.ch/~oetiker/webtools/mrtg/mrtg-unix-guide.html

is a very nice walk through to install and configure mrtg on unix, linux

regards



On Wed, 30 Jun 2004 23:03:05 +0100, Antony Stone
<antony@soft-solutions.co.uk> wrote:
> 
> On Wednesday 30 June 2004 7:46 pm, Peter Marshall wrote:
> 
> > yes it does.  Thank you very much.  I have been looking for an explanation
> > like that on the net. :)
> >
> > Do you have a link to where this netfilter documentation is ?
> 
> These might help fill in a few more details:
> 
> http://iptables-tutorial.frozentux.net/iptables-tutorial.html#USERLANDSTATES
> http://www.sns.ias.edu/~jns/security/iptables/iptables_conntrack.html
> 
> Antony.
> 
> > ----- Original Message -----
> > From: "Antony Stone" <Antony@Soft-Solutions.co.uk>
> > To: "netfilter" <netfilter@lists.netfilter.org>
> > Sent: Wednesday, June 30, 2004 2:07 PM
> > Subject: Re: track bandwith used
> >
> > On Wednesday 30 June 2004 5:51 pm, Peter Marshall wrote:
> > > You could make a connection out to a remote server.  That remote server
> > > might try to make a connection back to us that has nothing to do with the
> > > reason we connected to them.
> >
> > Such a connection would not be regarded as RELATED by the netfilter code.
> >
> > >  But the server may see it as related and allow it.
> >
> > I think you should read about netfilter's definition of RELATED.   It
> > doesn't
> > just mean "any packet which comes back from an IP address we're already
> > talking to".
> >
> > For example, I said that FTP data connections were RELATED to the FTP
> > control
> > connection - but that is only if you have loaded the FTP Conntrack Helper
> > module, or compiled FTP Conntrack support into your kernel.   That helper
> > is what RELATEs the two parts of FTP together in netfilter.
> >
> > Basically, if you don't have a helper module which understands why a
> > connection should be RELATED to another one, then it won't be.
> >
> > Arbitrary packets from IP addresses which happen to be part of an
> > ESTABLISHED
> > connection don't count - they will be seen as NEW incoming connections, and
> > make their own way through your ruleset (until they are persumably
> > DROPped), having no assiciation whatever to anything else which may be in
> > your connection tracking table.
> >
> > Hope this clarifies things?
> >
> > Regards,
> >
> > Antony.
> 
> -- 
> The truth is rarely pure, and never simple.
> 
>  - Oscar Wilde
> 
> 
> 
>                                                      Please reply to the list;
>                                                            please don't CC me.
> 
>


  reply	other threads:[~2004-07-01  7:01 UTC|newest]

Thread overview: 12+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-06-30 13:07 track bandwith used Peter Marshall
2004-06-30 13:41 ` Antony Stone
2004-06-30 14:07   ` Peter Marshall
2004-06-30 16:17     ` Antony Stone
2004-06-30 16:51       ` Peter Marshall
2004-06-30 17:07         ` Antony Stone
2004-06-30 18:46           ` Peter Marshall
2004-06-30 22:03             ` Antony Stone
2004-07-01  7:01               ` Askar Ali Khan [this message]
  -- strict thread matches above, loose matches on Subject: below --
2004-06-30 13:32 Piszcz, Justin Michael
2004-06-30 14:07 Aldo Lagana
2004-06-30 16:55 Antony Stone

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=a0f69e504070100011e5decdf@mail.gmail.com \
    --to=askarali@gmail.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox