Hi,
Don't know if you have tried ntop yet. Get a lot of good info from that.....might just be what you need. Not to sure if it will satisfy your port identifaction needs though...
eugene
-----Original Message-----
From: Aldo S. Lagana [mailto:[EMAIL PROTECTED]]
Sent: 20 May 2002 11:03 PM
To: [EMAIL PROTECTED]
Subject: Traffic Accounting
Is it possible (and how do you do it) to obtain traffic metrics individually by IP adresses? For example, I use squid and sarg to give me the details about port 80 traffic daily and that works great. More and more, I'm finding I need to be able to get the detail of every connection that is both outgoing and incoming to my netfilter gateway.
An example of this is say audio downloads - they typically are run on different ports and I want to know their stauration of our T1s.
Has anyone been able to get this detailed information (short of tcpdumping it all out?)
