Re: Real-Time traffic monitor?

2007-08-17 Thread Vince
Eric F Crist wrote:
 Hey all,
 
 I've got a fairly heavy-duty machine doing firewalling for my network,
 and the VAST majority of it's processing power is going unused.  As
 such, I'd like to put X on this box, attach a monitor, and display a
 series of real-time traffic graphs.  Does anyone know what the best
 software to use for this would be?
 
not sure about X programs but there is always iftop or pktstat in
ports/net-mgmt if you just want something realtime (no good for graphing
etc though i'm afraid.) Some of the the plugins for things like
sysutils/gkrellm(2) do things like traffic graphs but you really dont
want them on a firewall. If you dont need absolute realtime then just
enable bsnmp on the internal interface and run something like mrtg or
cacti (or even a very quick and dirty script  using rrdtool via cron)
against it.


Vince


 Thanks!
 
 -
 Eric F Crist
 Secure Computing Networks
 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Real-Time traffic monitor?

2007-08-16 Thread Eric F Crist

Hey all,

I've got a fairly heavy-duty machine doing firewalling for my  
network, and the VAST majority of it's processing power is going  
unused.  As such, I'd like to put X on this box, attach a monitor,  
and display a series of real-time traffic graphs.  Does anyone know  
what the best software to use for this would be?


Thanks!

-
Eric F Crist
Secure Computing Networks


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Real-Time traffic monitor?

2007-08-16 Thread Roland Smith
On Thu, Aug 16, 2007 at 01:03:54PM -0500, Eric F Crist wrote:
 Hey all,
 
 I've got a fairly heavy-duty machine doing firewalling for my network, and 
 the VAST majority of it's processing power is going unused.  As such, I'd 
 like to put X on this box, attach a monitor, and display a series of 
 real-time traffic graphs.  Does anyone know what the best software to use 
 for this would be?

For collecting data, I use pfstat. With a perl script and gnuplot I
create graphs from that data. With telak
(http://julien.danjou.info/telak.html) I put those graphs on the root
window. See http://www.xs4all.nl/~rsmith/freebsd/index.html#monitor

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp0QBG9Xdaar.pgp
Description: PGP signature


Re: Real-Time traffic monitor?

2007-08-16 Thread Bill Moran
In response to Eric F Crist [EMAIL PROTECTED]:

 Hey all,
 
 I've got a fairly heavy-duty machine doing firewalling for my  
 network, and the VAST majority of it's processing power is going  
 unused.  As such, I'd like to put X on this box, attach a monitor,  
 and display a series of real-time traffic graphs.  Does anyone know  
 what the best software to use for this would be?

You have lots of choices: MRTG, Cacti, SmokePing, ntop are some that
I've used that come to mind.

Which one is best really depends on you and your situation.

-- 
Bill Moran
http://www.potentialtech.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Real-Time traffic monitor?

2007-08-16 Thread Kurt Buff
On 8/16/07, Eric F Crist [EMAIL PROTECTED] wrote:
 Hey all,

 I've got a fairly heavy-duty machine doing firewalling for my
 network, and the VAST majority of it's processing power is going
 unused.  As such, I'd like to put X on this box, attach a monitor,
 and display a series of real-time traffic graphs.  Does anyone know
 what the best software to use for this would be?

I wouldn't put anything on it that isn't directly related to its mission.

At most, I'd suggest putting net-snmp on it, denying access from the
untrusted side(s), and polling the box with mrtg/cacti/nagios from
another machine.

Better, I think would be to put ntop on another machine and mirror the
port to which the firewall  is attached.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]