> Hi. > I have pfstat running and creating nice graphs, but I would like to > see > different data. I'm trying to collect stats from pf that will tell me > bits/s per port. I am logging everything (at the moment) and I can > use > tcpdump to see all packets of a specific port but I don't have a way > of > turning this output into a nice graph (which will be a lot easier to > explain). Does anyone do this type of graphing? And with what? I've > searched around but nothing seems to fit the bill and I wanted to ask > before > I started coding. > > Thanks, > Mark.
You can use tcpstat to create vmstat like statistics. Then you can create graphics from the tcpstat files with gnuplot. tcpstat allows tcpdump-like filters so you can specify ports, ip�s .... There is also a tcpstat/gnuplot howto: http://www.frenchfries.net/paul/tcpstat/gnuplot_howto.html I once wrote a script that made many graphics from a tcpdump file, but this process wasn't fast. it used a LOT of cpu, but i'm not that good in programming after all. But you can write your own program with libpcap, which is the library tcpdump uses. Check out the tcpdump website for more information. Tcpdump site: http://www.tcpdump.org/ Tcpstat site: http://www.frenchfries.net/paul/tcpstat/ GNUplot site: http://www.gnuplot.info/ Kenny Gryp -- http://gryp.dakin.be - [EMAIL PROTECTED]
