The example I gave was for simple ipchains accounting.
I think the most reliable and professional way to set up accounting would be to use NeTraMet. I don't know whether there's an off the shelf sql implementation to go with it, but Google came up with: http://ing.ctit.utwente.nl/WU5/index.html for example.
There are other programs, like nfr, that do the same as netramet, but some colleagues of mine were really pleasantly surprised by NeTraMets performance.
Serge.
-----Original Message-----
From: Luke Saunders [mailto:[EMAIL PROTECTED]]
Sent: dinsdag 25 juni 2002 11:56
To: [EMAIL PROTECTED]
Subject: Re: [Ntop] NTOP Stoping without a Reason
Is this for NTOP or for NetraMet?
Which would be the best package for accounting? I work for a company that does RF ISP. I need to find a package that will accurately track how much data each client downloads/uploads and uses an SQL database.
Regards
Luke
----- Original Message -----
From: Serge Maandag
To: [EMAIL PROTECTED]
Sent: Tuesday, June 25, 2002 6:52 PM
Subject: RE: [Ntop] NTOP Stoping without a Reason
You could also have a look at NetraMet or you could do accounting by adding an ACCEPT rule for every ip address in your packet filter and enable it's accounting, like
-s 1.1.1.1 -j ACCEPT
-s 1.1.1.2 -j ACCEPT
-s 1.1.1.3 -j ACCEPT
-s 0/0 -j DENY
That way you can secure the accounting and use ntop for real time stats, like tracking sessions.
Serge.
-----Original Message-----
From: Rafael Rodrigo - NSINET [mailto:[EMAIL PROTECTED]]
Sent: maandag 24 juni 2002 22:51
To: [EMAIL PROTECTED]
Subject: Re: [Ntop] NTOP Stoping without a Reason
MRTG is good, but ntop is exactly that I need. I need to
see traffic by host(how iptraf do) to, in end of month, know
how machines use the network and know what things the
machines are doing. Example:
192.168.0.1:
Transmit: 120 Mb
Receive: 100 Mb
Active TCP sessions:
192.168.77.1:80 <--> 200.255.214.60:3201
192.168.0.2:
Transmit: 200 Mb
Receive: 100 Mb
Active TCP sessions:
192.168.77.1:80 <--> 200.255.214.60:3201
...
NTOP is better tool that I found.
This thing iptraf do, but it don't save statistics. Ntop save if
it was stoped normaly (don't if it crashes).
But i'm using MRTG too. It�s very good to see the total Router
Bandwidth usage.
Thanks,
Rafael Rodrigo M. Rosa - NSI
Brazilian Internet Provider
----- Original Message -----
From: Vlade
To: [EMAIL PROTECTED]
Sent: Monday, June 24, 2002 5:25 PM
Subject: Re: [Ntop] NTOP Stoping without a Reason
For pure traffic count mrtg is the best. it can be found at http://people.ee.ethz.ch/~oetiker/webtools/mrtg/
It uses SNMP, run it againt your switch and you'll get total traffic stats for all your servers.
----- Original Message -----
From: Rafael Rodrigo - NSINET
To: [EMAIL PROTECTED]
Sent: Monday, June 24, 2002 2:33 PM
Subject: [Ntop] NTOP Stoping without a Reason
I have a Conectiva Linux 7.0 with the currente stable
version of tcpdump and lipcap.I compiled ntop2.0.99
RC2 and use this to count the traffic of my Network. All
traffic is only going for Internet. I don't have a samba/windows
network or anything as it. My Internet Link is of 512Kbps,
then the max network traffic is 512Kbps.
Well, the compile was fine, and NTOP run fine during
3 days. But now it stops without a reason. And I lost
all traffic counted by NTOP. I am using the flag -S1 save
all network traffic, but it don't work now. I am using the
current stable version of gdbm database.
The only thing that I think that can justify it, is a Hacker
attack to a machine monitored by NTOP. This attack cause a
total traffic of 1.1 Gigabytes on my network, during about
15 hours. But NTOP stops 5 hours after I stop the Hacker.
Somebody can help-me ?? If somebody knows a better
tool to count monthly traffic on a network by machines,
please tell me. But I think that this is the better tool.
Sorry by the bad english.
Thanks,
Rafael Rodrigo M. Rosa - NSI
Brazilian Internet Provider
