I ran across one called culprit (http://freshmeat.net/projects/culprit.pl/), which does kinda what I want. However, by the looks of things it doesnt look like its going to be easy to maintain a database of user bandwidth usage using it. I might see what I can do about modifying it, but I'm shocking at perl :) Netfilter sounds like a much saner idea - how would you grab the user a packet belongs to when you parse the logfiles? Thanks, Patrick > On Wed, 29 Sep 2004 12:49:34 +0200, Daniel Frederiksen > <cyberdoc@xxxxxxxxxxx> wrote: > > Hej Patrick > > > > Again there might be to ways I think. You could log the traffic via > > libpcap or netfilter. > > > > Netfilter could be set up to log specific traffic and afterwords you > > could parse the logfile and flush it. The collected data could then be > > put into a RRD base and graphed. The parsing of the logfiles is quite > > simple. > > > > Libpcap can do pretty much the same. However it might use up more CPU > > and memory in the process. I guess I could whip up a perlscript that > > uses libpcap to do that, if you don't know how. > > > > There are other projects out there resembling all this, but with a lot > > of other features included. Although I can't remember them at the time. > > *ponders*. If it comes back to me I'll post it. > > > > Best regards > > Daniel Frederiksen, Cyberdoc.dk > > > > > > > > On Wed, 2004-09-29 at 00:47, Patrick Coleman wrote: > > > Thanks for those links. I'm building this server from scratch, so > > > kernel recompiling is fine. But will these tools be able to monitor > > > the bandwidth of individual users on the server itself? I realise you > > > grab the apache logs to monitor bandwidth for web servers, but what > > > about other services, say ssh, scp or wget? Is there an way to log the > > > total amount of data passing through an interface? Is this possible? > > > Thanks for your help, > > > Patrick > > > > _______________________________________________ > > LARTC mailing list / LARTC@xxxxxxxxxxxxxxx > > http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ > > _______________________________________________ LARTC mailing list / LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
