Well, iptraf is more of a real time thing, so you'd have to be watching it at the moment you suspect a problem. But, by default, iptraf sorts the traffic by the most used. Also, instead of watching the outside interface, you may have to watch the inside interface to see the specific IP address causing problems.
I was looking at the vnstat page, that's pretty cool. Won't show use by specific IP, but shows overall usage, which could be helpful. There was a link on that page to something else called "darkstat". Looking at the darkstat page (http://dmr.ath.cx/net/darkstat/) the second screenshot, shows host/IP address sorted by what looks like total usage. Another one that I forgot to list on my page is called ipaudit. http://ipaudit.sourceforge.net/ It hasn't been updated in a very long time, but should still work. One of the pieces is a web interface, which gives essentially the same info as the darkstat screen shot above. It shows total/IN/OUT for each IP address source and destination. It's very handy and since ipaudit runs in the background you get on going stats. Check out the screen shots here: http://ipaudit.sourceforge.net/ipaudit-web/ Found this on google, and installation guide: http://www.symantec.com/connect/articles/introduction-ipaudit After looking at it, darkstat is updated very recently, you might try working with it before using ipaudit. ntop is also very cool and does all the same things, although it's a lot more overhead and a lot larger footprint than the other two. bb On Thu, Jun 17, 2010 at 2:15 PM, Nico Pagliaro <[email protected]> wrote: > Brad, in iptraf, where can you see the internal ip which is consuming > bandwidth? I cant find that option.. I can monitor traffic between my > extranal ip and the destination, but not which internal ip. > > Thanks and sorry about my question. Perhaps I can write you out if this > forum because we are talking about iptraf and no shorewall :( > > > On Thu, Jun 17, 2010 at 4:00 PM, Brad Bendily <[email protected]> wrote: >> >> iptraf shows you the IP addresses using your bandwidth, what more do >> you need than that? >> You may want to map IP addresses to easy to identify DNS names to get >> a better view of the >> specific user. >> Some other command line tools, similar to iptraf: >> dnstop >> iftop >> pktstat >> ntop >> iptraf >> ifstatus >> jnettop >> >> But, all of these are only going to show by IP. I think it's up to you >> to know what IP >> belongs to what user. >> >> At a former place I worked, I handed out static IPs via DHCP. Along >> with that, everyone >> got a DNS name that I know who it belonged to. Then via, iptraf, I could >> easily see who was using what. We had less that 100 users, so it wasn't to >> much to keep up with, if you have more users it gets harder as the >> number of users goes up. >> >> bb >> >> On Thu, Jun 17, 2010 at 1:14 PM, Nico Pagliaro <[email protected]> wrote: >> > Hi, is there any way to monitor bandwidth usage in my shorewall that >> > have 3 >> > different ISP. Now I am using iptraf, but I would like to know WHO is >> > using >> > my bandwidth. Is that possible? >> > >> > Really thanks >> > >> > >> > ------------------------------------------------------------------------------ >> > ThinkGeek and WIRED's GeekDad team up for the Ultimate >> > GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the >> > lucky parental unit. See the prize list and enter to win: >> > http://p.sf.net/sfu/thinkgeek-promo >> > _______________________________________________ >> > Shorewall-users mailing list >> > [email protected] >> > https://lists.sourceforge.net/lists/listinfo/shorewall-users >> > >> > >> >> >> >> -- >> Have Mercy & Say Yeah >> >> >> ------------------------------------------------------------------------------ >> ThinkGeek and WIRED's GeekDad team up for the Ultimate >> GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the >> lucky parental unit. See the prize list and enter to win: >> http://p.sf.net/sfu/thinkgeek-promo >> _______________________________________________ >> Shorewall-users mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/shorewall-users > > > ------------------------------------------------------------------------------ > ThinkGeek and WIRED's GeekDad team up for the Ultimate > GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the > lucky parental unit. See the prize list and enter to win: > http://p.sf.net/sfu/thinkgeek-promo > _______________________________________________ > Shorewall-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/shorewall-users > > -- Have Mercy & Say Yeah ------------------------------------------------------------------------------ ThinkGeek and WIRED's GeekDad team up for the Ultimate GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
