On Wednesday 27 August 2003 19:31, hare ram wrote: > Hi Stef > > How about Source and Desitination port, and protocol wise bytes transfer ( > like http, ftp, icmp, udp), if i want to track. > > next limitation, if the Server goes down, the traffic will be zero, that > will be another Limitation Not true. If you record the counters each 5 minutes, you loose max 5 minutes of counters. You can record the difference between the 2 reads and discard negative values. > If i send the all the traffic to Mysql, so i can get the old data to. > > may be you can correct me if, i may be wrong thinking > > correct me with the best methods to do If you really want it very detailed (src/dst - address/port), you indeed have to log it to mysql or so. You can calulcate the number of updates you have to do mysql and simulate this on a test box. Stef -- stef.coene@xxxxxxxxx "Using Linux as bandwidth manager" http://www.docum.org/ #lartc @ irc.oftc.net