Log internet traffic by IP: monitor usage

[Rob van Oijen]

Hi there,

I've got a Linux box (Slack 8) running as a local
gateway/webserver/mailserver. I have a local network connected to eth0
and a ADSL 'dial-up' to eth1 for internet connection.

I would like to monitor the use of internet, by logging traffic (in
Mb/Kb) from local IP's/machines through the gateway. Like a local fair
use policy...

Does anyone know a way to do so?

Taking it a step further: controlling bandwidth dependent on the
amount of users. So 3 users are surfin' and they each get MAX/3
bandwidth and not when someone is dowloading a 100 Mb file, the rest
gets more or less cut off since the large file will claim a lot of
bandwidth.

The second issue may come later, but a way to monitor traffic would be
appreciated. So if anyone can point me in the right direction....
(I'm not a Linux crack :( )

Thanx in advance,

Rob

[Barry Margolin]

In article <ac3aea0b.02030...@posting.google.com>,

Rob van Oijen <rob.va...@hetnet.nl> wrote:
>I've got a Linux box (Slack 8) running as a local
>gateway/webserver/mailserver. I have a local network connected to eth0
>and a ADSL 'dial-up' to eth1 for internet connection.
>
>I would like to monitor the use of internet, by logging traffic (in
>Mb/Kb) from local IP's/machines through the gateway. Like a local fair
>use policy...
>
>Does anyone know a way to do so?

tcpdump

>Taking it a step further: controlling bandwidth dependent on the
>amount of users. So 3 users are surfin' and they each get MAX/3
>bandwidth and not when someone is dowloading a 100 Mb file, the rest
>gets more or less cut off since the large file will claim a lot of
>bandwidth.

Don't know offhand if Linux provides any way to throttle traffic like
this. You might need to get yourself a real router (e.g. Cisco).

--
Barry Margolin, bar...@genuity.net
Genuity, Woburn, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.

[Michael Heiming]

Barry Margolin (<UK7h8.8$pc1...@paloalto-snr1.gtei.net>):

> In article <ac3aea0b.02030...@posting.google.com>,
> Rob van Oijen <rob.va...@hetnet.nl> wrote:

>>I would like to monitor the use of internet, by logging traffic
>>(in Mb/Kb) from local IP's/machines through the gateway. Like a
>>local fair use policy...
>>
>>Does anyone know a way to do so?

Easiest, would be running 'ntop' in web mode.

> tcpdump
>
>>Taking it a step further: controlling bandwidth dependent on the
>>amount of users. So 3 users are surfin' and they each get MAX/3
>>bandwidth and not when someone is dowloading a 100 Mb file, the
>>rest gets more or less cut off since the large file will claim a
>>lot of bandwidth.
>
> Don't know offhand if Linux provides any way to throttle traffic
> like
> this. You might need to get yourself a real router (e.g. Cisco).

AFAIK. the Linux Kernel 2.4 can do everything, if not more a cisco
can do for you (Haven't seen any with a statefull fw builtin).

The "Linux Advanced Routing & Traffic Control HOWTO"
(www.linuxdoc.org) might be a start.

Michael Heiming
--
Remove the +SIGNS case mail bounces.

[Jeremiah DeWitt Weiner]

Michael Heiming <michael...@heiming.de> wrote:
> Easiest, would be running 'ntop' in web mode.

Ditto this. ntop is /very/ cool.

--
If mail to me bounces, try removing the "+STRING" part of the address.