Hi Peter, and to those who replied off-list, On 04/06/18 23:57, Peter N. M. Hansteen wrote: >> This is something I'm looking to investigate, some sort of traffic >> accounting so I can track per IP/protocol/port, how much traffic passes >> through my router. I did something similar on Linux a year or two back, >> I just have to research how to do the equivalent in OpenBSD. >> > You're in luck, we have pflow(4) which requires only minimal pf.conf > surgery and a collector somewhere. I wrote about that at one point (with > the essentials also in The Book of PF): > https://bsdly.blogspot.com/2014/02/yes-you-too-can-be-evil-network.html > - but do note that once you have 'keep state' or similar with specific > options on a rule, remember to append pflow to the list of options. > > - Peter
Many thanks for that, I will have a look at that when I get a chance but it does sound promising. -- Stuart Longland (aka Redhatter, VK4MSL) I haven't lost my mind... ...it's backed up on a tape somewhere.
