Skip to contentSkip to conversation

traffic graphing?

DISCUSSION Dave Barnum 6 participants 7 messages Aug 20, 2004 – Aug 25, 2004

lore
Share & tools
lore
#0 lore raw

What would you guys suggest for a good traffic monitoring/graphing sollution for a iptables (shorewall) firewall?

#1 lore raw
Quoted 2 lines · Dave Barnum

What would you guys suggest for a good traffic monitoring/graphing sollution for a iptables (shorewall) firewall?

I haven't used it specifically with shorewall, but cacti
http://www.raxnet.net/products/cacti/ is nice with anything that you can monitor with snmp. It is a php web tool to set collection of data and view the graphs.

---
Les Mikesell
[email protected]

#2 lore raw
In reply to Dave Barnum

Witam

Quoted 2 lines · you

What would you guys suggest for a good traffic monitoring/graphing sollution for a iptables (shorewall) firewall?

I'm using Lstat - http://lstat.sourceforge.net/
This is a nice interface for rrdtool, but only in Polish :( Besides standard charts it allow you to capture stats form your iptables rules.

And, of course you can simple try rrdtool, but playing with it takes some time :)

Signature · 2 lines
Pozdrawiam
 Marcin                            mailto:[email protected]
#3 lore raw
In reply to Dave Barnum

Also, to do this I assume you needs logs to parse through in the first place.. Where might these be.. do i have to turn this on somewhere?

Quoted 3 lines · Dave Barnum

What would you guys suggest for a good traffic monitoring/graphing sollution for a iptables (shorewall) firewall?

#4 lore raw
In reply to Dave Barnum

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Quoted 2 lines · Dave Barnum

What would you guys suggest for a good traffic monitoring/graphing sollution for a iptables (shorewall) firewall?

You could try out my new solution, that's up at sourceforge now and now doing it's job quite well, but needs MySQL as a database.
Have a look at:
http://sourceforge.net/projects/ltaccts/

It will not destroy your current firewall configuration, but create rules solely intended for logging, use ULOG for collecting traffic statistics. You can define your own categories and browse through the logs using a web interface.

- --
Thilo Schulz

My public PGP key is available at http://home.bawue.de/~arny/public_key.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBJoXfZx4hBtWQhl4RAjC/AJ9dlVQ31p4DIW+WSS4b+l53ATJsBQCgk4oS FstTAyxAWRwCk7O8VS7U9Sc=
=boMJ
-----END PGP SIGNATURE-----

#6 lore raw
Quoted 10 lines · Brent Clark
Quoted 2 lines

What would you guys suggest for a good traffic monitoring/graphing sollution for a iptables (shorewall) firewall?

Hi

I use bandwidthd

The most fastest installation I have ever had encounted.

http://bandwidthd.sourceforge.net/

A good option is using Cacti+rrdtool to generate all kind of graphical stats. You just have to write some scripts to extract the data from the tables. I'm using something similar in my firewall, but extracting the data with a C program from the chains and then graphing it with rrdtool.

Signature · 12 lines
Jose Maria Lopez Hernandez
Director Tecnico de bgSEC
[email protected]
bgSEC Seguridad y Consultoria de Sistemas Informaticos
http://www.bgsec.com
ESPAÑA

The only people for me are the mad ones -- the ones who are mad to live,
mad to talk, mad to be saved, desirous of everything at the same time,
the ones who never yawn or say a commonplace thing, but burn, burn, burn
like fabulous yellow Roman candles.
                -- Jack Kerouac, "On the Road"