Re: Show bandwidth usage by IP address (through pf)
Maxim Khitrov wrote: > I have pf filtering traffic to our network. Is there any easy way to > see the current bandwidth usage sorted by ip? Someone is using up > almost 100% of total bandwidth and parsing "pfctl -ss -v" isn't > getting me anywhere. The trafshow tool (ports/net/trafshow) does exactly that. The nice thing about it is that it accepts the same filter expressions that tcpdump accepts, so you can easily filter by ports, addresses, interfaces, protocols and so on. It works independent from your packet filter, so it doesn't matter whether you use pf, ipf, ipfw or none at all. If you want to see the amount of accumulated traffic (i.e. since boot) per interface and per IP address, the commands "netstat -i" and "netstat -ib" will tell that (in packets and in bytes, respectively). Best regards Oliver -- Oliver Fromme, secnetix GmbH & Co. KG, Marktplatz 29, 85567 Grafing b. M. Handelsregister: Registergericht Muenchen, HRA 74606, Geschäftsfuehrung: secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht Mün- chen, HRB 125758, Geschäftsführer: Maik Bachmann, Olaf Erb, Ralf Gebhart FreeBSD-Dienstleistungen, -Produkte und mehr: http://www.secnetix.de/bsd One Unix to rule them all, One Resolver to find them, One IP to bring them all and in the zone to bind them. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: Show bandwidth usage by IP address (through pf)
2009/10/7 Maxim Khitrov : > I have pf filtering traffic to our network. Is there any easy way to > see the current bandwidth usage sorted by ip? Someone is using up > almost 100% of total bandwidth and parsing "pfctl -ss -v" isn't > getting me anywhere. It's overkill and does a ton more than what you're asking for...but have you looked at ipaudit? Or, more specifically, ipaudit-web? I ended up installing apache/gnuplot/etc from ports but installed ipaudit from source as the version in ports is *incredibly* outdated. kmw -- Whenever there is in any country, uncultivated lands and unemployed poor, it is clear that the laws of property have been so far extended as to violate natural right. The earth is given as a common stock for man to labour and live on. -- Thomas Jefferson, 1785 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: Show bandwidth usage by IP address (through pf)
On Wed, Oct 7, 2009 at 3:27 PM, Doug Poland wrote: > On Wed, Oct 07, 2009 at 03:22:33PM -0400, Maxim Khitrov wrote: >> Hello all, >> >> I have pf filtering traffic to our network. Is there any easy way to >> see the current bandwidth usage sorted by ip? Someone is using up >> almost 100% of total bandwidth and parsing "pfctl -ss -v" isn't >> getting me anywhere. >> > sysutils/pftop is your friend :) > Exactly what I needed, thanks! - Max ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
RE: Show bandwidth usage by IP address (through pf)
I use "nTop" for this, but I'm sure there are other ways. I'm not that familiar with pf so can't help much there. -Original Message- From: owner-freebsd-questi...@freebsd.org [mailto:owner-freebsd-questi...@freebsd.org] On Behalf Of Maxim Khitrov Sent: Wednesday, October 07, 2009 2:23 PM To: Free BSD Questions list Subject: Show bandwidth usage by IP address (through pf) Hello all, I have pf filtering traffic to our network. Is there any easy way to see the current bandwidth usage sorted by ip? Someone is using up almost 100% of total bandwidth and parsing "pfctl -ss -v" isn't getting me anywhere. - Max ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org" "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: Show bandwidth usage by IP address (through pf)
On Wed, Oct 07, 2009 at 03:22:33PM -0400, Maxim Khitrov wrote: > Hello all, > > I have pf filtering traffic to our network. Is there any easy way to > see the current bandwidth usage sorted by ip? Someone is using up > almost 100% of total bandwidth and parsing "pfctl -ss -v" isn't > getting me anywhere. > sysutils/pftop is your friend :) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Show bandwidth usage by IP address (through pf)
Hello all, I have pf filtering traffic to our network. Is there any easy way to see the current bandwidth usage sorted by ip? Someone is using up almost 100% of total bandwidth and parsing "pfctl -ss -v" isn't getting me anywhere. - Max ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
