Re: Saving pf state for accounting
And the numbers automatically wrap at 4GB, due to the i386 architecture if you're using such an arch. I have no clue if the amd64 arch will keep it any longer. And yes, I am topposting. On Thu, Jan 29, 2009 at 5:47 AM, Gunther Mayer wrote: > Hi guys, > > My server uses up tons of bandwidth every month and I'd like to start > recording what traffic volumes my different services chew up on a monthly > basis. My firewall utility of choice is pf and I've recently come across its > neat "label" facility so that I can do a simple "pfctl -sl" to get the > latest readings. > > That's all fair and well but I lose all that lovely accounting information > upon reboot so how do I go about saving this? I've googled quite a bit to > look for a solution but have found nothing useful so far, just unanswered > posts in the past. > > From what I can tell so far I'd have to write a custom rc script which > redirects "pfctl -sl" into some sort of logfile which then may be retrieved > at a later stage (and added to current counter output). Is there an easier > way perhaps? > > Gunther > ___ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " > freebsd-questions-unsubscr...@freebsd.org" > ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: Saving pf state for accounting
On Thursday 29 January 2009 03:47:51 Gunther Mayer wrote: > That's all fair and well but I lose all that lovely accounting > information upon reboot so how do I go about saving this? I've googled > quite a bit to look for a solution but have found nothing useful so far, > just unanswered posts in the past. The package of choice for traffic accounting is radius. That said, it's probably more work to set up initially then hacking the rc script, if you don't need it's authentication facilities. > From what I can tell so far I'd have to write a custom rc script which > redirects "pfctl -sl" into some sort of logfile which then may be > retrieved at a later stage (and added to current counter output). Is > there an easier way perhaps? Not that I can see, especially since for completeness, you'd have to hack the actual /etc/rc.d/pf, because statistics are reset upon rule reload. -- Mel Problem with today's modular software: they start with the modules and never get to the software part. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Saving pf state for accounting
Hi guys, My server uses up tons of bandwidth every month and I'd like to start recording what traffic volumes my different services chew up on a monthly basis. My firewall utility of choice is pf and I've recently come across its neat "label" facility so that I can do a simple "pfctl -sl" to get the latest readings. That's all fair and well but I lose all that lovely accounting information upon reboot so how do I go about saving this? I've googled quite a bit to look for a solution but have found nothing useful so far, just unanswered posts in the past. From what I can tell so far I'd have to write a custom rc script which redirects "pfctl -sl" into some sort of logfile which then may be retrieved at a later stage (and added to current counter output). Is there an easier way perhaps? Gunther ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
