On Fri, 20 Aug 2010, Magnus Ringdahl wrote:
> Hi. > I was wondering if anyone else was monitoring their gameserver traffic > and their clients ip-addresses? > I would like to figure out from which top ten ASN my clients come from. > I thought about running netstat at first, but since it can't report > client ip-addresses on UDP that failed. > Then i figured that perhaps iptables logging options would do the trick, > or perhaps tcpdump. > But i don't know whats best, so im turning to you guys, to see if anyoe > else have done this. > > My goal is to be able to see the connected clients ip-addresses and run > a script every x min, compari it to a RIR o get the ASN. > And then list which ASN that has most connections to my gameservers. Hi! There are several ways of doing this. These three comes into my mind, but there might be other ways. 1. Create a plugin (sourcemod or amxmodx) that saves all the ip's and parse that afterwards. 2. Send logs to a daemon that parse each logmessage and record the ip (logaddress_add). Writing the daemon should not be that difficult. You can probably use inetd to handle the connections and just parse the messages with a simple script. 3. parse the logs in the logdirs and record the ip's. I hope you have a local copy of the ASN list. Otherwise you might be blacklisted when you do a lot of queries. I would also suggest that you have everything in a DB and do a local lookup there before sending a query. /Bjorn _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
