Re: Logging bandwidth usage with PF

2007-11-13 Thread Jonathan Towne
On Mon, Nov 12, 2007 at 11:52:08PM -0500, Jason Dixon scribbled: # On Nov 12, 2007, at 10:31 AM, Joel Gudknecht wrote: # # Misc list: # # I'm trying to figure out a way to log and analyze bandwidth usage # passing through my PF gateway. It's doing NAT for ~60 users. # How about argus?

Logging bandwidth usage with PF

2007-11-12 Thread Joel Gudknecht
Misc list: I'm trying to figure out a way to log and analyze bandwidth usage passing through my PF gateway. It's doing NAT for ~60 users. Here are the pertinent logging rules; rdr pass log on $ext_if proto tcp to port smtp - $host rdr pass log on $ext_if proto tcp to port www - $host rdr pass

Re: Logging bandwidth usage with PF

2007-11-12 Thread Peter N. M. Hansteen
Joel Gudknecht [EMAIL PROTECTED] writes: rdr pass log on $ext_if proto tcp to port smtp - $host this only gives you the initial packet. for tracking traffic you probably want to look at log (all). I've tried analyzing pflogs using ethereal/wireshark but could not get specifics about IP's and

Re: Logging bandwidth usage with PF

2007-11-12 Thread Juan Miscaro
--- Joel Gudknecht [EMAIL PROTECTED] wrote: Misc list: I'm trying to figure out a way to log and analyze bandwidth usage passing through my PF gateway. It's doing NAT for ~60 users. Here are the pertinent logging rules; rdr pass log on $ext_if proto tcp to port smtp - $host rdr pass

Re: Logging bandwidth usage with PF

2007-11-12 Thread Calomel
Joel, Check out pfflowd. This site has a how to. Configuration of NetFlow, Flowtools, pfflowd on OpenBSD Have you ever wanted to keep track of every packet going through your firewall? How about getting some stats on the hosts using your network. Stats like most bandwidth used or most popular

Re: Logging bandwidth usage with PF

2007-11-12 Thread Jason Dixon
On Nov 12, 2007, at 10:31 AM, Joel Gudknecht wrote: Misc list: I'm trying to figure out a way to log and analyze bandwidth usage passing through my PF gateway. It's doing NAT for ~60 users. Here are the pertinent logging rules; rdr pass log on $ext_if proto tcp to port smtp - $host rdr pass