Le 23/09/2007 à 00:27:15-0700, Martin Alejandro Paredes Sanchez a écrit
> Use the force luke
> You only need 100 packets (you may decide to increase) that are directed to 
> your server, to the NFS daemon.
> tcpdump -c 100 -nq dst port nfs and dst host $HOST
> You don't need to interpret this info, you need to know who is originating 
> the 
> traffic, lets extract the ip that are originating the traffic
> nawk 'BEGIN {FS="[ .]"; OFS="."} {print $4,$5,$6,$7}'
> But, who generate more traffic?
> Lets count how many packets are originating each one of those ip
> nawk '{packets[$1]++} END{for (ip in packets){print packets[ip], ip}}'
> And order it
> sort -rn

OK, but that's not I'm exactly I search.

I ask again my question because It's seem my poor english make my question
not clear.

I've two servers :

        Server A (NFS) --- NFS -- Server B

On server A there one service is NFS, and server B is it's client.

On server B I've lot of users, some users make very huge transfert throught
NFS (what I don't want), huge = ~ 10-100 Go in one time (big file).

I want to known who did this, because I've lot of users it's not easy to
known when I'm using top/ps to known who did this (sometime it's the output
of some scientifique software). 

The solution you give me can tell me the name of server B, but this thing I
known it ;-), what I want to known is WHO on server B.

Do you think I need to use dark side of the force....I known it's not more 
but it's more easy ;-)


Albert SHIH
Observatoire de Paris Meudon
SIO batiment 15
Heure local/Local time:
Lun 24 sep 2007 15:12:56 CEST
freebsd-questions@freebsd.org mailing list
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to