Re: graphing pf stats

2006-01-04 Thread Joel Knight

[EMAIL PROTECTED] wrote:

We use Cacti, Net-SNMP, and several Perl scripts to monitor our OpenBSD
firewalls.

https://noc.ece.uprm.edu/cacti/graph_view.php?action=treetree_id=2hide=0branch_id=734



Anyone else who is using snmp to monitor their firewalls (or who is 
interested in doing so) might want to check out the snmp MIB I wrote for 
the net-snmp agent. I use it to monitor all my firewalls along with a 
mix of MRTG and Cacti.


http://www.packetmischief.ca/openbsd/snmp/




.joel


Re: graphing pf stats

2006-01-03 Thread Pablo . Rebollo
We use Cacti, Net-SNMP, and several Perl scripts to monitor our OpenBSD
firewalls.

https://noc.ece.uprm.edu/cacti/graph_view.php?action=treetree_id=2hide=0branch_id=734

Pablo


 I have written an IP accounting system using pf labels.  It runs every 5
 minutes and extracts stats for data entering and leaving my lan.  It works
 nicely but I want to go to the next level and graph this data at each
 interval.

 It is a shell script that produces files that contain a single integer to
 represent bytes for individual tcp/udp ports as well as totals per lan IP
 address.  Without the risk of reinventing the wheel, what would be the
 best way to graph this stuff?

 I have heard of Perl with GD::Graph but are there other ways?

 Thanks in advance for comments and guidance in this matter.

 --
 Peter






 __
 Find your next car at http://autos.yahoo.ca



Re: graphing pf stats

2006-01-03 Thread Peter

--- [EMAIL PROTECTED] wrote:

 We use Cacti, Net-SNMP, and several Perl scripts to monitor our OpenBSD
 firewalls.
 

https://noc.ece.uprm.edu/cacti/graph_view.php?action=treetree_id=2hide=0branch_id=734
 
 Pablo
 
 
  I have written an IP accounting system using pf labels.  It runs every
 5
  minutes and extracts stats for data entering and leaving my lan.  It
 works
  nicely but I want to go to the next level and graph this data at each
  interval.
 
  It is a shell script that produces files that contain a single integer
 to
  represent bytes for individual tcp/udp ports as well as totals per lan
 IP
  address.  Without the risk of reinventing the wheel, what would be the
  best way to graph this stuff?
 
  I have heard of Perl with GD::Graph but are there other ways?
 
  Thanks in advance for comments and guidance in this matter.

That looks good.  But firstly it doesn't show byte transfers, secondly the
data is rrd type (not persistent), and thirdly I don't want such a complex
setup using rrdtool, cacti, snmp, and webserver.  Right now all I have is
a shell script and it is doing almost all I need.  I am leaning towards a
perl script (GD::Graph) to graph the data I already have.






__ 
Find your next car at http://autos.yahoo.ca


Re: graphing pf stats

2006-01-03 Thread Pablo . Rebollo
Peter:

You could use gnuplot.  For sure it can be easily included within your
shell scripts.

Pablo


 --- [EMAIL PROTECTED] wrote:

 We use Cacti, Net-SNMP, and several Perl scripts to monitor our OpenBSD
 firewalls.


 https://noc.ece.uprm.edu/cacti/graph_view.php?action=treetree_id=2hide=0branch_id=734

 Pablo


  I have written an IP accounting system using pf labels.  It runs every
 5
  minutes and extracts stats for data entering and leaving my lan.  It
 works
  nicely but I want to go to the next level and graph this data at each
  interval.
 
  It is a shell script that produces files that contain a single integer
 to
  represent bytes for individual tcp/udp ports as well as totals per lan
 IP
  address.  Without the risk of reinventing the wheel, what would be the
  best way to graph this stuff?
 
  I have heard of Perl with GD::Graph but are there other ways?
 
  Thanks in advance for comments and guidance in this matter.

 That looks good.  But firstly it doesn't show byte transfers, secondly the
 data is rrd type (not persistent), and thirdly I don't want such a complex
 setup using rrdtool, cacti, snmp, and webserver.  Right now all I have is
 a shell script and it is doing almost all I need.  I am leaning towards a
 perl script (GD::Graph) to graph the data I already have.






 __
 Find your next car at http://autos.yahoo.ca



Re: graphing pf stats

2006-01-02 Thread Karl O. Pinc


On 01/01/2006 07:52:55 PM, Peter wrote:
 I want to go to the next level and graph this data at each

interval.


Re: R, see also:
http://www-128.ibm.com/developerworks/linux/library/l-r1/

Karl [EMAIL PROTECTED]
Free Software:  You don't pay back, you pay forward.
 -- Robert A. Heinlein


Re: graphing pf stats

2006-01-02 Thread Karl O. Pinc


On 01/01/2006 07:52:55 PM, Peter wrote:

I have written an IP accounting system using pf labels.  It runs every
5
minutes and extracts stats for data entering and leaving my lan.  It
works
nicely but I want to go to the next level and graph this data at each
interval.


I have no experience, but...

The R Project for Statistical Computing
R is a language and environment for statistical
computing and graphics.
http://www.r-project.org/
(Has many plug-ins for perl, python, etc.)


Karl [EMAIL PROTECTED]
Free Software:  You don't pay back, you pay forward.
 -- Robert A. Heinlein


Re: graphing pf stats

2006-01-02 Thread Diana Eichert
I've used one of the GDchart extensions to ruby for some histogram plot of
network link utilization.  However now that Firefox natively supports SVG
I would also consider http://www.germane-software.com/software/SVG/SVG::Graph/

once upon a lonesome Peter wrote:
SNIP
 I have heard of Perl with GD::Graph but are there other ways?
SNIP
 --
 Peter


diana

Past hissy-fits are not a predictor of future hissy-fits.
Nick Holland(06 Dec 2005)


Re: graphing pf stats

2006-01-02 Thread Kelley Reynolds

On Jan 1, 2006, at 8:52 PM, Peter wrote:
I have written an IP accounting system using pf labels.  It runs  
every 5
minutes and extracts stats for data entering and leaving my lan.   
It works

nicely but I want to go to the next level and graph this data at each
interval.



I wrote one in ruby that uses rrdtool for stat tracking and graph  
generation. I planned on writing another more flexible one using BPF  
so I didn't bother telling anybody about it. If anybody is interested  
in seeing it, let me know.


Kelley Reynolds
President
Inside Systems, Inc.


PGP.sig
Description: This is a digitally signed message part


Re: graphing pf stats

2006-01-02 Thread Nikolay Kalev

Kelley Reynolds wrote:


On Jan 1, 2006, at 8:52 PM, Peter wrote:

I have written an IP accounting system using pf labels.  It runs  
every 5
minutes and extracts stats for data entering and leaving my lan.   It 
works

nicely but I want to go to the next level and graph this data at each
interval.



I wrote one in ruby that uses rrdtool for stat tracking and graph  
generation. I planned on writing another more flexible one using BPF  
so I didn't bother telling anybody about it. If anybody is interested  
in seeing it, let me know.


Kelley Reynolds
President
Inside Systems, Inc.


It would be nice to take a look at your rrdtool system :-). I have one 
of my own which is named pf2mrtg you can check it out in 
www.securelabs.org/scripts.html which is based on mrtg and pf 
labels.Thanks in advance :-)


Re: graphing pf stats

2006-01-02 Thread Bob DeBolt
On Sunday 01 January 2006 18:52, you wrote:

pfstat works well, it may be a nice starting point for you or it may do 
everything you want.

Bob


Re: graphing pf stats

2006-01-02 Thread ed
On Mon, 2 Jan 2006 13:56:21 -0700
Bob DeBolt [EMAIL PROTECTED] wrote:

 pfstat works well, it may be a nice starting point for you or it may
 do  everything you want.

If there's time I'll look at making a plugin for monitoring programs.

-- 
Regards, Ed http://www.usenix.org.uk - http://irc.is-cool.net 
:%s/Open Source/Free Software/g


graphing pf stats

2006-01-01 Thread Peter
I have written an IP accounting system using pf labels.  It runs every 5
minutes and extracts stats for data entering and leaving my lan.  It works
nicely but I want to go to the next level and graph this data at each
interval.

It is a shell script that produces files that contain a single integer to
represent bytes for individual tcp/udp ports as well as totals per lan IP
address.  Without the risk of reinventing the wheel, what would be the
best way to graph this stuff?

I have heard of Perl with GD::Graph but are there other ways?

Thanks in advance for comments and guidance in this matter.

--
Peter






__ 
Find your next car at http://autos.yahoo.ca