Re: [leaf-user] Wanted: easy way to see load over time
Eric, A very effective but not so easy way to see exactly what sort of traffic your router has been moving, is to install a NetFlow probe on your router. It will forward flows to a NetFlow collector, permitting further analysis and graphing on the traffic. You would then be able to categorize the traffic (for example http/ftp/mail/p2p/other for in/out, by host/subnet, period of time) quite precisely. Some pointers: * A NetFlow probe that runs on Bering-uClibc: fprobe-ulog (I compiled it successfully but no extensive tests done) [1] * A NetFlow collector / processor: NfDump [2] * A NetFlow web-based reporting engine: NfSen [3] Hope this may help you, Philippe J. [1] http://fprobe.sourceforge.net/ [2] http://nfdump.sourceforge.net/ [2] http://nfsen.sourceforge.net/ Eric House wrote: I'd like to be able to see at a glance what sort of traffic my LEAF router's been moving over the past hours/days/weeks/whatever. Is there any way to do that now given packages available (for the uClibc version, ideally.) If not, I'm imagining writing something to plug into webmin. It might look like this: * cron jobs to log cumulative traffic on eth0 (say), probably by calling 'ip addr', every 1 or 5 or 10 minutes or so. * cgi scripts to parse the above, producing a crude bar graph using a borderless table * the page produced could probably allow display by hour, day, week, etc., with links to drill down into bars or look at a larger view. Typical parameterized cgi stuff. I'm not sure when I'd have time for this, but does it strike folks as useful and not duplicating something we already have? Thanks, --Eric --- SF.Net email is Sponsored by the Better Software Conference EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile Plan-Driven Development * Managing Projects Teams * Testing QA Security * Process Improvement Measurement * http://www.sqe.com/bsce5sf leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
Re: [leaf-user] Wanted: easy way to see load over time
| * the page produced could probably allow display by hour, day, week, | etc., with links to drill down into bars or look at a larger view. | Typical parameterized cgi stuff. | | I'm not sure when I'd have time for this, but does it strike folks as | useful and not duplicating something we already have? Hi Eric, like Charles answered yesterday, I too used snmp lrp packages on my LEAF boxes and created views of the stored data with Cacti, a MRTG like package on a separate 233 MHz Redhat box. But Cacti seems rather demanding on the processor so my monitoring (though on a dedicated machine) was slow in response. If you are after a solution that could generate the badwidth reports through HTTP directly out of the LEAF box without seriously eating the processing power for packet handling, that would be - by my oppinion - a nice and simple option to the user. Tom --- SF.Net email is Sponsored by the Better Software Conference EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile Plan-Driven Development * Managing Projects Teams * Testing QA Security * Process Improvement Measurement * http://www.sqe.com/bsce5sf leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
Re: [leaf-user] Wanted: easy way to see load over time
Hi, A very effective but not so easy way to see exactly what sort of traffic your router has been moving, is to install a NetFlow probe on your router. It will forward flows to a NetFlow collector, permitting further analysis and graphing on the traffic. You would then be able to categorize the traffic (for example http/ftp/mail/p2p/other for in/out, by host/subnet, period of time) quite precisely. Some pointers: * A NetFlow probe that runs on Bering-uClibc: fprobe-ulog (I compiled it successfully but no extensive tests done) [1] We are currently using nprobe without any problem in various production environments in the Lince branch. * A NetFlow collector / processor: NfDump [2] There are plenty of those. * A NetFlow web-based reporting engine: NfSen [3] We have developed our own (propietary) as none of the open source alternatives had the features we needed. You can see some screens at: http://www.eneotecnologia.com/mambo/ = Software = Eneo Flow = View screen Hope it helps. -- Jaime Nebrera - [EMAIL PROTECTED] Consultor TI - ENEO Tecnologia SL Telf.- 95 455 40 62 - 619 04 55 18 --- SF.Net email is Sponsored by the Better Software Conference EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile Plan-Driven Development * Managing Projects Teams * Testing QA Security * Process Improvement Measurement * http://www.sqe.com/bsce5sf leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
RE: [leaf-user] Wanted: easy way to see load over time
Hello Eric, You could try the pmacct package, it may be exactly what you need. Eric Spakman -Original Message- From: Eric House[EMAIL PROTECTED] Sent: 7/28/05 2:25:45 AM To: leafleaf-user@lists.sourceforge.net Subject: [leaf-user] Wanted: easy way to see load over time I'd like to be able to see at a glance what sort of traffic my LEAF router's been moving over the past hours/days/weeks/whatever. Is there any way to do that now given packages available (for the uClibc version, ideally.) If not, I'm imagining writing something to plug into webmin. It might look like this: * cron jobs to log cumulative traffic on eth0 (say), probably by calling 'ip addr', every 1 or 5 or 10 minutes or so. * cgi scripts to parse the above, producing a crude bar graph using a borderless table * the page produced could probably allow display by hour, day, week, etc., with links to drill down into bars or look at a larger view. Typical parameterized cgi stuff. I'm not sure when I'd have time for this, but does it strike folks as useful and not duplicating something we already have? Thanks, --Eric -- [Message truncated. Tap Edit-Mark for Download to get remaining portion.] --- SF.Net email is Sponsored by the Better Software Conference EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile Plan-Driven Development * Managing Projects Teams * Testing QA Security * Process Improvement Measurement * http://www.sqe.com/bsce5sf leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
[leaf-user] Wanted: easy way to see load over time
I'd like to be able to see at a glance what sort of traffic my LEAF router's been moving over the past hours/days/weeks/whatever. Is there any way to do that now given packages available (for the uClibc version, ideally.) If not, I'm imagining writing something to plug into webmin. It might look like this: * cron jobs to log cumulative traffic on eth0 (say), probably by calling 'ip addr', every 1 or 5 or 10 minutes or so. * cgi scripts to parse the above, producing a crude bar graph using a borderless table * the page produced could probably allow display by hour, day, week, etc., with links to drill down into bars or look at a larger view. Typical parameterized cgi stuff. I'm not sure when I'd have time for this, but does it strike folks as useful and not duplicating something we already have? Thanks, --Eric -- ** * From the desktop of: Eric House, [EMAIL PROTECTED] * *Crosswords 4.1.3 for PalmOS now ARM-native: xwords.sourceforge.net * ** --- SF.Net email is Sponsored by the Better Software Conference EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile Plan-Driven Development * Managing Projects Teams * Testing QA Security * Process Improvement Measurement * http://www.sqe.com/bsce5sf leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
Re: [leaf-user] Wanted: easy way to see load over time
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Eric House wrote: | I'd like to be able to see at a glance what sort of traffic my LEAF | router's been moving over the past hours/days/weeks/whatever. Is | there any way to do that now given packages available (for the uClibc | version, ideally.) | | If not, I'm imagining writing something to plug into webmin. It might | look like this: | | * cron jobs to log cumulative traffic on eth0 (say), probably by | calling 'ip addr', every 1 or 5 or 10 minutes or so. | | * cgi scripts to parse the above, producing a crude bar graph using a | borderless table | | * the page produced could probably allow display by hour, day, week, | etc., with links to drill down into bars or look at a larger view. | Typical parameterized cgi stuff. | | I'm not sure when I'd have time for this, but does it strike folks as | useful and not duplicating something we already have? I track bandwidth (and other stats) on several (about 8) LEAF boxes I have in production. I just use SNMP (on the LEAF boxes) and MRTG (running on a debian system, and tracking lots of other stuff besides just my firewall load). Firewall rules keep SNMP visible to only trusted hosts (fixed IP blocks), as SNMP isn't really something you want visible to the raw internet unless you *REALLY* know what you're doing when locking it down. - -- Charles Steinkuehler [EMAIL PROTECTED] -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFC6EPILywbqEHdNFwRAnSKAKDpk+Z1bpgPu1BbyzPOFrbvq6pGfACfed9/ j9to3SnJ/iZ3XSetZECxM1Y= =6B7l -END PGP SIGNATURE- --- SF.Net email is Sponsored by the Better Software Conference EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile Plan-Driven Development * Managing Projects Teams * Testing QA Security * Process Improvement Measurement * http://www.sqe.com/bsce5sf leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
