Re: Tool for traffic measure?
On Sat, Jan 3, 2009 at 8:03 AM, Sdävtaker wrote: > Thanks for the info, i got a linksys SD208: > http://www.linksys.com/servlet/Satellite?c=L_Product_C2&childpagename=US%2FLayout&cid=1123638180923&pagename=Linksys%2FCommon%2FVisitorWrapper&lid=8092322279B03 > It got 0 intelligence, right? > Thanks for the replies > Sdav > > On Sat, Jan 3, 2009 at 4:00 AM, Kurt Buff wrote: >> On Fri, Jan 2, 2009 at 9:21 PM, Sdävtaker wrote: >>> Hello, >>> I got a subnet with 5 machines and a cablemodem who provides 5 public ips >>> All is conected to a switch. >>> One of the machines is not ours and we want to check it is not >>> abuseing our internet link, so we want to know if there is any way to >>> monitor bandwich usage from one of the other machines in the subnet >>> with no need to modify the foreing machine config. Something like use >>> tcpdump in promiscuos mode or something like that, we doesnt matter >>> the content, we just need a bandwich conssumption meassure. >>> Thanks for any ideas. >>> Sdav >> >> You have several options: >> >> 1) If the switch has some intelligence, you can monitor it to measure >> bandwidth consumption. There are two ways to do this: >> a) if the switch implements SNMP, you can use mrtg (simple) or >> cacti (not so simple) to graph bandwidth on the switch by port and in >> total >> b) if the switch can mirror all of the data going across the >> switch to a port on the switch, you can use ntop to graph traffic. It >> only shows the top three bandwidth consumers at any given time, but i) >> it does have very nice graphing, and if the machine you are concerned >> about is consuming more than its fair share it will show, and ii) you >> can use standard bpf filters to capture utilization for just that box. >> >> 2) if you have a spare machine, you can put two NICs in it, and use it >> as a bridge between the switch and the router. This is a bit more >> complicated, but it allows you to implement either option 1a or 1b >> above. >> >> Kurt Yes, the switch has zero intelligence. You'll either need another switch, or a spare PC with two NICs. Kurt ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: Tool for traffic measure?
Thanks for the info, i got a linksys SD208: http://www.linksys.com/servlet/Satellite?c=L_Product_C2&childpagename=US%2FLayout&cid=1123638180923&pagename=Linksys%2FCommon%2FVisitorWrapper&lid=8092322279B03 It got 0 intelligence, right? Thanks for the replies Sdav On Sat, Jan 3, 2009 at 4:00 AM, Kurt Buff wrote: > On Fri, Jan 2, 2009 at 9:21 PM, Sdävtaker wrote: >> Hello, >> I got a subnet with 5 machines and a cablemodem who provides 5 public ips >> All is conected to a switch. >> One of the machines is not ours and we want to check it is not >> abuseing our internet link, so we want to know if there is any way to >> monitor bandwich usage from one of the other machines in the subnet >> with no need to modify the foreing machine config. Something like use >> tcpdump in promiscuos mode or something like that, we doesnt matter >> the content, we just need a bandwich conssumption meassure. >> Thanks for any ideas. >> Sdav > > You have several options: > > 1) If the switch has some intelligence, you can monitor it to measure > bandwidth consumption. There are two ways to do this: > a) if the switch implements SNMP, you can use mrtg (simple) or > cacti (not so simple) to graph bandwidth on the switch by port and in > total > b) if the switch can mirror all of the data going across the > switch to a port on the switch, you can use ntop to graph traffic. It > only shows the top three bandwidth consumers at any given time, but i) > it does have very nice graphing, and if the machine you are concerned > about is consuming more than its fair share it will show, and ii) you > can use standard bpf filters to capture utilization for just that box. > > 2) if you have a spare machine, you can put two NICs in it, and use it > as a bridge between the switch and the router. This is a bit more > complicated, but it allows you to implement either option 1a or 1b > above. > > Kurt > -- Sdävtaker prays to Rikku goddess for a good treasure. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: Tool for traffic measure?
On Jan 2, 2009, at 11:21 PM, Sdävtaker wrote: Hello, I got a subnet with 5 machines and a cablemodem who provides 5 public ips All is conected to a switch. One of the machines is not ours and we want to check it is not abuseing our internet link, so we want to know if there is any way to monitor bandwich usage from one of the other machines in the subnet with no need to modify the foreing machine config. Something like use tcpdump in promiscuos mode or something like that, we doesnt matter the content, we just need a bandwich conssumption meassure. Thanks for any ideas. Buy a smarter switch and do the traffic counts in the switch. As things stand the switch is isolating all 5 machines from each other, none hear what the others have to say to the cable modem, so there is no way you can sniff the other's traffic. If instead of a switch you had a dumb hub then all machines would hear what all the other machines were saying to each other and the cable modem. Is very hard to buy a dumb hub these days. Is easier to buy a smarter switch. A configurable smart switch can deliver the questionable machine's traffic to both the cable modem and to one of your machines but there is no point unless you want/need to see the contents of the packets. A switch that smart should also be able to count packets and tally total byte counts. If I understand correctly that is all you want. -- David Kelly N4HHE, dke...@hiwaay.net Whom computers would destroy, they must first drive mad. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: Tool for traffic measure?
On Fri, Jan 2, 2009 at 9:21 PM, Sdävtaker wrote: > Hello, > I got a subnet with 5 machines and a cablemodem who provides 5 public ips > All is conected to a switch. > One of the machines is not ours and we want to check it is not > abuseing our internet link, so we want to know if there is any way to > monitor bandwich usage from one of the other machines in the subnet > with no need to modify the foreing machine config. Something like use > tcpdump in promiscuos mode or something like that, we doesnt matter > the content, we just need a bandwich conssumption meassure. > Thanks for any ideas. > Sdav You have several options: 1) If the switch has some intelligence, you can monitor it to measure bandwidth consumption. There are two ways to do this: a) if the switch implements SNMP, you can use mrtg (simple) or cacti (not so simple) to graph bandwidth on the switch by port and in total b) if the switch can mirror all of the data going across the switch to a port on the switch, you can use ntop to graph traffic. It only shows the top three bandwidth consumers at any given time, but i) it does have very nice graphing, and if the machine you are concerned about is consuming more than its fair share it will show, and ii) you can use standard bpf filters to capture utilization for just that box. 2) if you have a spare machine, you can put two NICs in it, and use it as a bridge between the switch and the router. This is a bit more complicated, but it allows you to implement either option 1a or 1b above. Kurt ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Tool for traffic measure?
Hello, I got a subnet with 5 machines and a cablemodem who provides 5 public ips All is conected to a switch. One of the machines is not ours and we want to check it is not abuseing our internet link, so we want to know if there is any way to monitor bandwich usage from one of the other machines in the subnet with no need to modify the foreing machine config. Something like use tcpdump in promiscuos mode or something like that, we doesnt matter the content, we just need a bandwich conssumption meassure. Thanks for any ideas. Sdav ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
