re: Traffic Monitor

From: Arie Kachler (akachler_at_telcom.net)
Date: 04/22/04

  • Next message: Wolfpaw - Dale Corse: "RE: Traffic Monitor" 
    Date: Thu, 22 Apr 2004 10:43:03 -0400
To: freebsd-isp@freebsd.org

    Hi Spidey,

    If you want to go low-cost (free), try http://ipband.sourceforge.net. It
    won't let you limit connections that are hogging your bandwidth, but at
    least you know who the hogs are.
    If you want full bells and whistles,
    http://www.packeteer.com/prod-sol/products/packetshaper.cfm. This one
    will let you do anything you want. Exprensive but worth it.

    Hope the info helps.

    Arie Kachler

    >Hi
    >
    >I am an ISP running FreeBSD as a firewall and as a Mail Server. My problem
    >is that I am not able to monitor the amount of traffic that user are using
    >on my network. in south Africa bandwidth is extremely expensive and I need
    >to take my bandwidth to the edge.
    >
    >My network looks like this: My Link comes in on a Cisco 805 from the router
    >it goes to the first NIC on the Firewall from the second NIC it runs into a
    >10base HUB where there are only 3 ports used one as I said for the Firewall
    >the other for a FreeBSD box (I want to use this box for traffic monitoring)
    >and then one port for the rest of the network which connects to a 100base
    >switch. The reason I used the 10base HUB is because it broadcasts all the
    >data to all the ports. So for all data to and from the firewall will be
    >caught by the Monitoring BSD box. I hope this makes sense.
    >
    >What I am looking for is some app that could show me live what ip on my
    >network is utilizing what part of the bandwidth. Don't laugh !!I have a 256k
    >Diginet connection and I would like to see who is killing my network. I do
    >get live graphs from my upstream supplier but it shows the line utilization
    >from my router and not who is using what.
    >
    >So I can't be proactive in solving speed issues I need to wait for it to
    >happen and then by a process of elimination disconnect segments of the
    >network and see when the graph drops. I tried TCPDUMP but it is difficult to
    >understand (perhaps I am just stupid) but it's a time consuming process and
    >to late to fix the problem.
    >
    >I hope this makes sense to someone
    >
    >thank you
    >
    >Spidey
    >

    _______________________________________________
    freebsd-isp@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-isp
    To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"

  • Next message: Wolfpaw - Dale Corse: "RE: Traffic Monitor"

    Relevant Pages

    • RE: can ping but not browse
      ... I have stopped the firewall. ... # are safed from all (security) hazards. ... firewall/bastion host to the internet ... # internet and to an internal network, ...
      (Fedora)
    • Re: Why not use NETBEUI on Windows XP ??
      ... Trusted zones means that firewall rules will be bypassed for any or certain ... not count on netbeui being a defense for such as long as smb connectivity ... while the connection is open. ... > Microsoft Networking components on my network. ...
      (microsoft.public.windowsxp.network_web)
    • Re: Why not use NETBEUI on Windows XP ??
      ... Trusted zones means that firewall rules will be bypassed for any or certain ... not count on netbeui being a defense for such as long as smb connectivity ... while the connection is open. ... > Microsoft Networking components on my network. ...
      (microsoft.public.win2000.networking)
    • Re: Firewall for broadband connection
      ... A personal firewall application that runs on your computer will often be ... it clearly needs user intervention to apply updates. ... IP address, then VNC is a simple way to do ... I install VNC, even in a protected network, I always change the port ...
      (comp.security.firewalls)
    • RE: Hidden Ports
      ... this is done by the firewalls to prevent authenticated files from being replaced by trojans and connecting to the internet. ... kerio firewall ... or a program that already had network access attempted to ... > Depending on the Access setting for a component, ZoneAlarm Pro ...
      (Security-Basics)