Re: Show bandwidth usage by IP address (through pf)

2009-10-08 Thread Oliver Fromme
Maxim Khitrov  wrote:
 > I have pf filtering traffic to our network. Is there any easy way to
 > see the current bandwidth usage sorted by ip? Someone is using up
 > almost 100% of total bandwidth and parsing "pfctl -ss -v" isn't
 > getting me anywhere.

The trafshow tool (ports/net/trafshow) does exactly that.

The nice thing about it is that it accepts the same filter
expressions that tcpdump accepts, so you can easily filter
by ports, addresses, interfaces, protocols and so on.

It works independent from your packet filter, so it doesn't
matter whether you use pf, ipf, ipfw or none at all.

If you want to see the amount of accumulated traffic (i.e.
since boot) per interface and per IP address, the commands
"netstat -i" and "netstat -ib" will tell that (in packets
and in bytes, respectively).

Best regards
   Oliver

-- 
Oliver Fromme, secnetix GmbH & Co. KG, Marktplatz 29, 85567 Grafing b. M.
Handelsregister: Registergericht Muenchen, HRA 74606,  Geschäftsfuehrung:
secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht Mün-
chen, HRB 125758,  Geschäftsführer: Maik Bachmann, Olaf Erb, Ralf Gebhart

FreeBSD-Dienstleistungen, -Produkte und mehr:  http://www.secnetix.de/bsd

One Unix to rule them all, One Resolver to find them,
One IP to bring them all and in the zone to bind them.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Show bandwidth usage by IP address (through pf)

2009-10-07 Thread Kevin Wilcox
2009/10/7 Maxim Khitrov :

> I have pf filtering traffic to our network. Is there any easy way to
> see the current bandwidth usage sorted by ip? Someone is using up
> almost 100% of total bandwidth and parsing "pfctl -ss -v" isn't
> getting me anywhere.

It's overkill and does a ton more than what you're asking for...but
have you looked at ipaudit? Or, more specifically, ipaudit-web? I
ended up installing apache/gnuplot/etc from ports but installed
ipaudit from source as the version in ports is *incredibly* outdated.

kmw

-- 
Whenever there is in any country, uncultivated lands and unemployed
poor, it is clear that the laws of property have been so far extended
as to violate natural right. The earth is given as a common stock for
man to labour and live on. -- Thomas Jefferson, 1785
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Show bandwidth usage by IP address (through pf)

2009-10-07 Thread Maxim Khitrov
On Wed, Oct 7, 2009 at 3:27 PM, Doug Poland  wrote:
> On Wed, Oct 07, 2009 at 03:22:33PM -0400, Maxim Khitrov wrote:
>> Hello all,
>>
>> I have pf filtering traffic to our network. Is there any easy way to
>> see the current bandwidth usage sorted by ip? Someone is using up
>> almost 100% of total bandwidth and parsing "pfctl -ss -v" isn't
>> getting me anywhere.
>>
> sysutils/pftop is your friend :)
>

Exactly what I needed, thanks!

- Max
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


RE: Show bandwidth usage by IP address (through pf)

2009-10-07 Thread Gary Gatten
I use "nTop" for this, but I'm sure there are other ways.  I'm not that
familiar with pf so can't help much there.

-Original Message-
From: owner-freebsd-questi...@freebsd.org
[mailto:owner-freebsd-questi...@freebsd.org] On Behalf Of Maxim Khitrov
Sent: Wednesday, October 07, 2009 2:23 PM
To: Free BSD Questions list
Subject: Show bandwidth usage by IP address (through pf)

Hello all,

I have pf filtering traffic to our network. Is there any easy way to
see the current bandwidth usage sorted by ip? Someone is using up
almost 100% of total bandwidth and parsing "pfctl -ss -v" isn't
getting me anywhere.

- Max
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"freebsd-questions-unsubscr...@freebsd.org"








"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Show bandwidth usage by IP address (through pf)

2009-10-07 Thread Doug Poland
On Wed, Oct 07, 2009 at 03:22:33PM -0400, Maxim Khitrov wrote:
> Hello all,
> 
> I have pf filtering traffic to our network. Is there any easy way to
> see the current bandwidth usage sorted by ip? Someone is using up
> almost 100% of total bandwidth and parsing "pfctl -ss -v" isn't
> getting me anywhere.
> 
sysutils/pftop is your friend :)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Show bandwidth usage by IP address (through pf)

2009-10-07 Thread Maxim Khitrov
Hello all,

I have pf filtering traffic to our network. Is there any easy way to
see the current bandwidth usage sorted by ip? Someone is using up
almost 100% of total bandwidth and parsing "pfctl -ss -v" isn't
getting me anywhere.

- Max
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"