CentOS, flow-tools, Cacti + FlowViewer plugin. All free.

Here's one of the reports I like to look at a couple times a day. Top 5 sources for the last hour. flow-cat does need some horsepower behind it for more complex search filters. This one happened to take about 2 seconds on 12 Xeon cores.

Motherf'ing windows updates by far.

On 9/17/2016 2:07 PM, That One Guy /sarcasm wrote:
i never had a collector i liked that wasnt an arm and a leg

On Sat, Sep 17, 2016 at 2:03 PM, Josh Luthman <j...@imaginenetworksllc.com <mailto:j...@imaginenetworksllc.com>> wrote:

    Netflow is free...

    Josh Luthman
    Office: 937-552-2340 <tel:937-552-2340>
    Direct: 937-552-2343 <tel:937-552-2343>
    1100 Wayne St
    Suite 1337
    Troy, OH 45373

    On Sep 17, 2016 2:58 PM, "Mark - Myakka Technologies"
    <m...@mailmt.com <mailto:m...@mailmt.com>> wrote:


        I was trying to work within Steve's budget.

        Also, I should give a disclaimer.  In my previous life, I was a
        programmer.  I still love to program.  Any excuse I get to
        write even
        a small script/program, I'll do it.

Case in point is netflow. I wanted to track our nat users. Mikrotik,
        starting with 6.29, added NAT data to the netflow export.  I
        looked at
        all the collectors out there and decided they were way
        overkill for
        what I wanted.  So, I took a day and wrote my own netflow
        using perl.  Just grabs the netflow data, filters out the
        garbage, and
        writes to a tab-delimited text file base of the date and
        hour.  Very
        simple.  Does exactly what I needed.

        Best regards,
         Mark                            mailto:m...@mailmt.com

        Myakka Technologies, Inc.
        www.MyakkaTech.com <http://www.MyakkaTech.com>

        Proud Sponsor of the Myakka City Relay For Life

        Please Donate at Please Donate at

        Saturday, September 17, 2016, 2:37:48 PM, you wrote:

        JL> Netflow would do that.ᅵ Procera might, and it's a big
        ass BMU.

        JL> Josh Luthman
        JL> Office: 937-552-2340 <tel:937-552-2340>
        JL> Direct: 937-552-2343 <tel:937-552-2343>
        JL> 1100 Wayne St
        JL> Suite 1337
        JL> Troy, OH 45373

        JL> On Sep 17, 2016 2:28 PM, "That One Guy /sarcasm"
        JL> <thatoneguyst...@gmail.com
        <mailto:thatoneguyst...@gmail.com>> wrote:
        JL> I actually wasnt even looking for granular to the PC, I was
        JL> just more curious about getting the service or source.

        JL> I got on their AirRouter, there is an XboxOne, so thats
        probably the cuplrit

        JL> There is also a directv and 4 odd vendor MACs im assuming are
        JL> the directv slingthings s there is that

        JL> long term torch logging would have sufficed at the site router

        JL> On Sat, Sep 17, 2016 at 1:23 PM, Josh Luthman
        JL> <j...@imaginenetworksllc.com
        <mailto:j...@imaginenetworksllc.com>> wrote:
        JL> Powercode will give you daily break down but that doesn't
        JL> identify which PC Xbox or phone did it.

        JL> Josh Luthman
        JL> Office: 937-552-2340 <tel:937-552-2340>
        JL> Direct: 937-552-2343 <tel:937-552-2343>
        JL> 1100 Wayne St
        JL> Suite 1337
        JL> Troy, OH 45373

        JL> On Sep 17, 2016 2:18 PM, "Mark - Myakka Technologies"
        <m...@mailmt.com <mailto:m...@mailmt.com>> wrote:
        JL> I'm using platypus and radius.ᅵ I don't know much about
        powercode, but
        JL> I'm assuming they dump the usage into some type of SQL table.

        JL> I wanted a finer detailed usage, so I added some code to
        the PLAT SQL
        JL> database to give me upload and download by hour for for
        each user in a
        JL> different table.

        JL> Took me a few days to figure out how to do it.ᅵ Someone
        that knows SQL
        JL> could bang it out in a few hours tops.ᅵ Most of my time was
        JL> researching SQL triggers.

        JL> Having it broken down by hour helps when talking to
        customers.ᅵ I also
        JL> wrote some CGI scripts, so the customers can access the
        data via a web
        JL> page.

        JL> --
        JL> Best regards,
        JL> ᅵMarkᅵ ᅵ ᅵ ᅵ ᅵ ᅵ ᅵ ᅵ ᅵ ᅵ ᅵ ᅵ ᅵ
        ᅵ mailto:m...@mailmt.com <mailto:m...@mailmt.com>

        JL> Myakka Technologies, Inc.
        JL> www.MyakkaTech.com <http://www.MyakkaTech.com>

        JL> Proud Sponsor of the Myakka City Relay For Life
        JL> http://www.RelayForLife.org/MyakkaCityFL

        JL> Please Donate at Please Donate at
        JL> http://www.myakkatech.com/RFL.html
        JL> ------

        JL> Saturday, September 17, 2016, 2:05:03 PM, you wrote:

        TOGs>> powercode

        TOGs>> On Sat, Sep 17, 2016 at 12:47 PM, Mark - Myakka
        TOGs>> Technologies <m...@mailmt.com <mailto:m...@mailmt.com>>
        TOGs>> How are you tracking overall usage now?

        TOGs>> --
        TOGs>> Best regards,
        TOGs>> ï¿ Markï¿  ï¿  ï¿  ï¿  ï¿  ï¿  ï¿  ï¿ ï¿  ï¿  ï¿  ï¿
        TOGs>> ï¿  ï¿  mailto:m...@mailmt.com <mailto:m...@mailmt.com>

        TOGs>> Myakka Technologies, Inc.
        TOGs>> www.MyakkaTech.com <http://www.MyakkaTech.com>

        TOGs>> Proud Sponsor of the Myakka City Relay For Life
        TOGs>> http://www.RelayForLife.org/MyakkaCityFL

        TOGs>> Please Donate at Please Donate at
        TOGs>> http://www.myakkatech.com/RFL.html
        TOGs>> ------

        TOGs>> Friday, September 16, 2016, 12:40:59 AM, you wrote:

        TOGs>>> I forgot to caveat the "I want to" with the "I have 0
        TOGs>>> funding from the boss purse"

        TOGs>>> On Thu, Sep 15, 2016 at 10:37 PM, Daniel White
        <afmu...@gmail.com <mailto:afmu...@gmail.com>> wrote:
        TOGs>>> Sandvine :-D

        TOGs>>> ᅵ

        TOGs>>> Daniel White

        TOGs>>> Managing Director ï¿  Hardware Distribution Sales

        TOGs>>> ConVergence Technologies

        TOGs>>> Cell: +1 (303) 746-3590 <tel:%2B1%20%28303%29%20746-3590>

        TOGs>>> dwh...@converge-tech.com <mailto:dwh...@converge-tech.com>

        TOGs>>> ᅵ

        TOGs>>> From: Af [mailto:af-boun...@afmug.com
        <mailto:af-boun...@afmug.com>] On Behalf Of Josh Reynolds
        TOGs>>> Sent: Thursday, September 15, 2016 9:37 PM
        TOGs>>> To:af@afmug.com <mailto:to%3...@afmug.com>
        TOGs>>> Subject: Re: [AFMUG] documenting customer usage

        TOGs>>> ᅵ

        TOGs>>> Procera :P

        TOGs>>> ᅵ

        TOGs>>> On Sep 15, 2016 8:36 PM, "That One Guy /sarcasm"
        TOGs>>> <thatoneguyst...@gmail.com
        <mailto:thatoneguyst...@gmail.com>> wrote:

        TOGs>>> so we got this:

        TOGs>>> "Can yotu help us somehow figure out what is using all of
        TOGs>>> our data? We have looked at the daily usage and can
        not figure
        TOGs>>> it out. There are days that we have been gone for
        several hours
        TOGs>>> and the usage is VERY high. Then days we are home have
        TOGs>>> extremely low. We are at a loss; can you help us or
        TOGs>>> someone who can. Is there a way to break this down hourly?
        TOGs>>> Thanks!
        TOGs>>> --"

        TOGs>>> ᅵ

        TOGs>>> ᅵ

        TOGs>>> this is the one in ten request, the other 9 are normally
        TOGs>>> "we didnt do this you people are lying,we never use the
        TOGs>>> internet, our kids follow rules, youre cheating us" in
        a real
        TOGs>>> catty voice

        TOGs>>> ᅵ

        TOGs>>> ᅵ

        TOGs>>> screw those 9 douches, its usually one of the spouses
        TOGs>>> porn affliction, the kids game console. or the fact
        they leave 5
        TOGs>>> units running in the house with netflix on autoplay,
        if theyre
        TOGs>>> not illegally torrenting some shit.

        TOGs>>> ᅵ

        TOGs>>> ᅵ

        TOGs>>> but, there is the one, who arent cocks, they genuinely
        TOGs>>> want to know. We arent providing them a router, so
        TOGs>>> from there directly is out

        TOGs>>> ᅵ

        TOGs>>> we just recently moved DNS to us (huge value I have
        TOGs>>> already found) So whats the best way (to the account,
        not the
        TOGs>>> individual machine) to track this down, in our
        environment, We
        TOGs>>> have mikrotik 1100ahx2 from to AP to the edge, and for
        the firs
        TOGs>>> time, I actually want to set up a tool to help the 10
        TOGs>>> and if you guys who know more than me can spit out a
        script to
        TOGs>>> drop in to monitor this customer I can pretend I have
        TOGs>>> within th company. .

        TOGs>>> ᅵ

        TOGs>>> ᅵ

        TOGs>>> ᅵ

        TOGs>>> If you only see yourself as part of the team but
        TOGs>>> youᅵ don'tᅵ see your team as part of yourself you
        haveᅵ already
        TOGs>>> failed as part of the team.

        TOGs>>>ï¿  ï¿ Virus-free. www.avast.com <http://www.avast.com>

If you only see yourself as part of the team but you don't see your team as part of yourself you have already failed as part of the team.

Reply via email to