Brad!! WOW, really thanks for you help!! I will try all of this stuff and
then I let you know how it goes.
Thanks
On Thu, Jun 17, 2010 at 5:01 PM, Brad Bendily <bend...@gmail.com> wrote:
> Well, iptraf is more of a real time thing, so you'd have to be
> watching it at the moment you suspect a problem.
> But, by default, iptraf sorts the traffic by the most used.
> Also, instead of watching the outside interface, you may have to watch
> the inside interface to see the
> specific IP address causing problems.
>
> I was looking at the vnstat page, that's pretty cool. Won't show use
> by specific IP, but shows overall usage, which
> could be helpful. There was a link on that page to something else
> called "darkstat".
> Looking at the darkstat page (http://dmr.ath.cx/net/darkstat/) the
> second screenshot, shows host/IP address
> sorted by what looks like total usage.
>
> Another one that I forgot to list on my page is called ipaudit.
> http://ipaudit.sourceforge.net/
> It hasn't been updated in a very long time, but should still work.
> One of the pieces is a web interface, which gives essentially the same
> info as the darkstat
> screen shot above. It shows total/IN/OUT for each IP address source
> and destination.
> It's very handy and since ipaudit runs in the background you get on going
> stats.
> Check out the screen shots here:
> http://ipaudit.sourceforge.net/ipaudit-web/
>
> Found this on google, and installation guide:
> http://www.symantec.com/connect/articles/introduction-ipaudit
>
> After looking at it, darkstat is updated very recently, you might try
> working with it before using ipaudit.
>
> ntop is also very cool and does all the same things, although it's a
> lot more overhead and a lot larger footprint
> than the other two.
>
> bb
>
>
> On Thu, Jun 17, 2010 at 2:15 PM, Nico Pagliaro <nico...@gmail.com> wrote:
> > Brad, in iptraf, where can you see the internal ip which is consuming
> > bandwidth? I cant find that option.. I can monitor traffic between my
> > extranal ip and the destination, but not which internal ip.
> >
> > Thanks and sorry about my question. Perhaps I can write you out if this
> > forum because we are talking about iptraf and no shorewall :(
> >
> >
> > On Thu, Jun 17, 2010 at 4:00 PM, Brad Bendily <bend...@gmail.com> wrote:
> >>
> >> iptraf shows you the IP addresses using your bandwidth, what more do
> >> you need than that?
> >> You may want to map IP addresses to easy to identify DNS names to get
> >> a better view of the
> >> specific user.
> >> Some other command line tools, similar to iptraf:
> >> dnstop
> >> iftop
> >> pktstat
> >> ntop
> >> iptraf
> >> ifstatus
> >> jnettop
> >>
> >> But, all of these are only going to show by IP. I think it's up to you
> >> to know what IP
> >> belongs to what user.
> >>
> >> At a former place I worked, I handed out static IPs via DHCP. Along
> >> with that, everyone
> >> got a DNS name that I know who it belonged to. Then via, iptraf, I could
> >> easily see who was using what. We had less that 100 users, so it wasn't
> to
> >> much to keep up with, if you have more users it gets harder as the
> >> number of users goes up.
> >>
> >> bb
> >>
> >> On Thu, Jun 17, 2010 at 1:14 PM, Nico Pagliaro <nico...@gmail.com>
> wrote:
> >> > Hi, is there any way to monitor bandwidth usage in my shorewall that
> >> > have 3
> >> > different ISP. Now I am using iptraf, but I would like to know WHO is
> >> > using
> >> > my bandwidth. Is that possible?
> >> >
> >> > Really thanks
> >> >
> >> >
> >> >
> ------------------------------------------------------------------------------
> >> > ThinkGeek and WIRED's GeekDad team up for the Ultimate
> >> > GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the
> >> > lucky parental unit. See the prize list and enter to win:
> >> > http://p.sf.net/sfu/thinkgeek-promo
> >> > _______________________________________________
> >> > Shorewall-users mailing list
> >> > Shorewall-users@lists.sourceforge.net
> >> > https://lists.sourceforge.net/lists/listinfo/shorewall-users
> >> >
> >> >
> >>
> >>
> >>
> >> --
> >> Have Mercy & Say Yeah
> >>
> >>
> >>
> ------------------------------------------------------------------------------
> >> ThinkGeek and WIRED's GeekDad team up for the Ultimate
> >> GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the
> >> lucky parental unit. See the prize list and enter to win:
> >> http://p.sf.net/sfu/thinkgeek-promo
> >> _______________________________________________
> >> Shorewall-users mailing list
> >> Shorewall-users@lists.sourceforge.net
> >> https://lists.sourceforge.net/lists/listinfo/shorewall-users
> >
> >
> >
> ------------------------------------------------------------------------------
> > ThinkGeek and WIRED's GeekDad team up for the Ultimate
> > GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the
> > lucky parental unit. See the prize list and enter to win:
> > http://p.sf.net/sfu/thinkgeek-promo
> > _______________________________________________
> > Shorewall-users mailing list
> > Shorewall-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/shorewall-users
> >
> >
>
>
>
> --
> Have Mercy & Say Yeah
>
>
> ------------------------------------------------------------------------------
> ThinkGeek and WIRED's GeekDad team up for the Ultimate
> GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the
> lucky parental unit. See the prize list and enter to win:
> http://p.sf.net/sfu/thinkgeek-promo
> _______________________________________________
> Shorewall-users mailing list
> Shorewall-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>
------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the
lucky parental unit. See the prize list and enter to win:
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users
