I'm going from memory here, but depending on your budget it may not be
practical to log all IP traffic based upon the domain name.
Basically, the information you need (ie the domain name) is wrapped up
within the IP packet during transmission and is not contained in the IP
headers.
To get at this information you need a Layer 3 Switch which actually
disassembles each packet going through it and can be configured to record
activity on a per domain name basis (and lots of other funky uses).
AFAIK this is the only way to track ALL traffic to ALL protocols running
behind a particular domain name.
Alternately you could implement the same process in software (there are
proably tools out there that can do this) but such a machine would probably
not scale too well under load (cost/performance)...
The downside to the hardware route is the cost, which can be anything
upwards of $10K for a single switch.
Check out
http://www.cisco.com/warp/public/779/largeent/learn/technologies/L3_switchin
g.html
for more information and a good starting point...
Hope this helps,
Mark Sutton
Idaya Ltd
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of treonet. Peter
> Schade
> Sent: 06 June 2001 12:44
> To: [EMAIL PROTECTED]
> Subject: Re: traffic monitoring by domainnames
>
>
> with webalizer i can only log the apache and ftp but i will log ALL the
> domain traffic...
> any programs wich can do that?
>
> Thanks Peter
>
> ----- Original Message -----
> From: "Zen Woo" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, June 06, 2001 12:18 PM
> Subject: Re: traffic monitoring by domainnames
>
>
> > IP accounting using ipchains is for the host to monitor
> bandwidth usage on
> a
> > per VS basis only. To monitor the bandwidth used by each site hosted
> within
> > the VS, a third-party application (probably Webalizer) needs to be
> installed
> > within the VS.
> >
> > Zen
> >
> > ----- Original Message -----
> > From: "treonet. Peter Schade" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Wednesday, June 06, 2001 5:03 PM
> > Subject: Re: traffic monitoring by domainnames
> >
> >
> > i have checked the archives, the only thing i found was ip
> accounting with
> > ipchains, but i need this on a per domain base (like
www.freevsd.org has
a
> traffic amount of 4 GB or www.test.org has 2 GB and so on).
>
> Sorry for my english :(
>
> Thanks peter
>
> ----- Original Message -----
> From: "Tim Sellar" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, May 30, 2001 11:37 PM
> Subject: RE: traffic monitoring by domainnames
>
>
> > This has been answered previously. Check the mail archives on
freevsd.org.
> >
> > > -----Original Message-----
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED]]On Behalf Of treonet. Peter
> > > Schade
> > > Sent: 30 May 2001 12:57
> > > To: [EMAIL PROTECTED]
> > > Subject: traffic monitoring by domainnames
> > >
> > >
> > > HI all!
> > >
> > > How can i get the traffic for each domain in the virtual servers?
> > >
> > > The virtual servers are logged by ipchains with the ip-adresses.
> > >
> > > Thanks Peter
> >
>
>
