Re: auditing network traffic

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 11/27/18 2:22 PM, Roger Heflin wrote:
> if you have sar installed (package is sysstat) then sar -n DEV will
> give you 10 minute network counters, it will give you 1 minute data if
> you turn sar's sample timer down to 1 minute.
> 
> snmp if you router supports it, and I have also ssh'ed into my router
> ever X minutes and collected its network stats on routers that did not
> properly support snmp.

Which is why I suggested cacti/RRDTool. RRD does the SNMP fetch/decode,
cacti graphs it in a pretty readable format. All Linux systems support
SNMP. SOHO routers _may_ support it. Probably many don't.

> On Tue, Nov 27, 2018 at 2:28 PM Tim via users
> <users@xxxxxxxxxxxxxxxxxxxxxxx> wrote:
>>
>> Tim:
>>>> If I want to check on how much data my computer's been putting
>>>> through my ISP over the last few days, is there anything logged by
>>>> default that I can look at, or do need to install something extra?
>>
>> Ed Greshko:
>>> Are you saying you have a single system with only traffic going to
>>> the ISP?
>>
>> No, it's several devices going through a modem/router, which doesn't
>> really give enough info, so I was hoping I could find something on the
>> computer to rule it in or out as being the sudden upturn in traffic.
>>
>> While basic info is easy to find out (like how much data since it
>> connected), that doesn't tell me anything about what it used yesterday,
>> or the day before, etc.
>>
>> I'd been keeping an eye on that, day by day, manually, as I was getting
>> closer to going over my monthly quota, then suddenly I've been rated
>> limited as 12 gigs has gone through *somewhere*.
>>
>> To make matters worse, the rate limiting is so severe that many
>> websites just time out and fail (including the ISP's own website).
>> While the ISP claims that they throttle you, rather than charge you
>> more or cut you off, to allow you to continue using the internet until
>> the next month, it doesn't work.
>>
>> Conversely, when they had a network configuration fault that limited me
>> by the same amount, earlier this year, that speed was considered so
>> unusable as to be worthy of giving me a refund.
>>
>> It seems that in today's modern high-bandwidth internet, if you can't
>> finish loading a page in a few seconds, it aborts on you.  To be more
>> weird, the ISP has a transparent proxy, that ought to mitigate that
>> issue (they could grab the page in one go, and feed it to you slowly).
>> For the major ISP that is the backbone for the entire country, they're
>> very crap at doing their job.
>>
>> --
>> [tim@localhost ~]$ uname -rsvp
>> Linux 4.16.11-100.fc26.x86_64 #1 SMP Tue May 22 20:02:12 UTC 2018 x86_64
>>
>> Boilerplate:  All mail to my mailbox is automatically deleted.
>> There is no point trying to privately email me, I only get to see
>> the messages posted to the mailing list.
>>
>> If "2001: A Space Odyssey" taught us anything, it's that Siri will,
>> one day, murder us all.
>> _______________________________________________
>> users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
>> To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
>> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>> List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
> _______________________________________________
> users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
> To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
> 


-- 
----------------------------------------------------------------------
- Rick Stevens, Systems Engineer, AllDigital    ricks@xxxxxxxxxxxxxx -
- AIM/Skype: therps2        ICQ: 226437340           Yahoo: origrps2 -
-                                                                    -
-        Change is inevitable, except from a vending machine.        -
----------------------------------------------------------------------
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx



[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux