Hello all I am trying to get bandwidth accounting working with shorewall I wish
to account for all traffic and have a breakdown by ports as i get billed for
all my bandwidth so it is quite important to monitor all traffic. Also i would
like to do charting to have a visual representation of my traffic however i am
having difficulty getting this working and appeal to this mailing list for help
thank you in advance.
Running Debian squeeze with shorewall version is 4.4.11.6 installed from the
repos
NOTE i have also installed apt-get install xtables-addons-common to try and get
per IP accounting going but get this error
iptaccount -l net-loc
libxt_ACCOUNT_cl userspace accounting tool v1.3
Showing table: net-loc
Read failed: Can't get table information from kernel. Does it exist?
I have mostly successfully gotten accounting working using this doc
http://shorewall.net/Accounting.html
By mostly i mean i get output when i run shorewall show web and even more when
i run shorewall show
However counters seem to get reset each time i restart shorewall
# shorewall show web
Shorewall 4.4.11.6 Chain web at pve-sun-1 - Tue Sep 16 15:28:19 MDT 2014
Counters reset Fri Sep 12 17:58:19 MDT 2014
Chain web (2 references)
pkts bytes target prot opt in out source destination
3251K 4100M tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 tcp spt:80
261K 222M tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 tcp spt:443
3513K 4322M RETURN all -- * * 0.0.0.0/0 0.0.0.0/0
I have added the below to my /etc/shorewall/accounting file NOTE not sure if i
can use ACCOUNT lines as my shorewall version might be to old? should i or can
i fix this?
#
# Accounting File - http://shorewall.net/Accounting.html
#
# /etc/shorewall/accounting
#
#ACTION CHAIN SOURCE DEST ...
ACCOUNT(net-loc,10.0.0.0/8) - eth0 -
ACCOUNT(net-loc,10.0.0.0/8) - - eth0
#ACTION CHAIN SOURCE DESTINATION PROTOCOL DEST SOURCE
# PORT PORT
ssh:COUNT - eth0 - tcp 22
ssh:COUNT - - eth0 tcp - 22
DONE ssh
ssh10276:COUNT - eth0 - tcp 10276
ssh10276:COUNT - - eth0 tcp - 10276
DONE ssh10276
web:COUNT - - eth0 tcp - 80
web:COUNT - - eth0 tcp - 443
DONE web
smtp:COUNT - eth0 - tcp 25
smtp:COUNT - - eth0 tcp - 25
DONE smtp
pop3:COUNT - eth0 - tcp 110
pop3:COUNT - - eth0 tcp - 110
DONE pop3
imap:COUNT - eth0 - tcp 143
imap:COUNT - - eth0 tcp - 143
DONE imap
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
Computer King CaN-Mail Surveillance King
http://computerking.ca http://canmail.org http://surveillanceking.net
Surveillance - Sales Service - Hosting Backup
Internet Based Surveillance Systems
Custom Service Pac kages
Secure IMAP Email - Automated Remote Backups - Photo Blogs - Online ERP and
Accounting Packages
------------------------------------------------------------------------------
Want excitement?
Manually upgrade your production database.
When you want reliability, choose Perforce.
Perforce version control. Predictably reliable.
http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
