Re: [LARTC] NAT-aware traffic analysis

2007-09-06 Thread Marco Aurelio
Sorry if didn't reply you as expected Currently I use iptables to monitor how many bytes and packets each client has transmitted: Each client has an ACCEPT rule that matches their IP and MAC address I can see the byte and packet counters with iptables -L -n -v then, I use a script to parse this

Re: [LARTC] NAT-aware traffic analysis

2007-09-05 Thread Ming-Ching Tiew
From: "Marco Aurelio" <[EMAIL PROTECTED]> > If you use IFB or IMQ you can shape the outgoing WAN traffic before NAT > I am not sure if I understand this reply or the reply seems to me, is not replying to my original question. I am asking how to collect statistics about LAN users with respect to

Re: [LARTC] NAT-aware traffic analysis

2007-09-05 Thread Marco Aurelio
If you use IFB or IMQ you can shape the outgoing WAN traffic before NAT On 9/5/07, Martin A. Brown <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Greetings, > > : I have tried using iptraf for my NAT firewall to analyse the IP > : traffic. Basically I am faced w

Re: [LARTC] NAT-aware traffic analysis

2007-09-04 Thread Martin A. Brown
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Greetings, : I have tried using iptraf for my NAT firewall to analyse the IP : traffic. Basically I am faced with this difficulty of related the : source IP to the outgoing interface to the internet, so I am : wondering if anyone has a suggesti

Re: [LARTC] NAT-aware traffic analysis

2007-09-04 Thread Ming-Ching Tiew
From: "Salim S I" <[EMAIL PROTECTED]> > A different approach is to use iptables counters in FORWARD chain (-s > $CLIENT_IP -i eth0 -o ! eth0). That would require a rule for each user. > > Well sort of theoretically possible but bad in pratice. If I have 300 internal users, I will have to crea

RE: [LARTC] NAT-aware traffic analysis

2007-09-04 Thread Salim S I
A different approach is to use iptables counters in FORWARD chain (-s $CLIENT_IP -i eth0 -o ! eth0). That would require a rule for each user. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ming-Ching Tiew Sent: Wednesday, September 05, 2007 11:09 AM To: