linux traffic control and accounting

Hi, can you recommend me software for traffic control and accounting.
I've been using ipac-ng so far but I need something with more features.
I also need to block internet access to users when they reach specified
number of MB.

Thanks.

Try -

http://www.knowplace.org/shaper/

mnis wrote:
> Hi, can you recommend me software for traffic control and accounting.
> I've been using ipac-ng so far but I need something with more
features.
> I also need to block internet access to users when they reach
specified
> number of MB.
>
> Thanks.

mnis wrote:

> Hi, can you recommend me software for traffic control and accounting.
> I've been using ipac-ng so far but I need something with more features.
> I also need to block internet access to users when they reach
> specified number of MB.
>
> Thanks.

For traffic accounting I tried several things and in the end I stopped
at pmacct. It is based on libpcap, not on iptables rules. For limiting
the traffic I don't know - you can try to run a cron script to verify
the traffic and block the users that don't behave.

Mihai

Managing traffic and accounting are sometimes a great headache for
admins ...

Here is one of the great link ...

http://www.lartc.org : Linux Advanced Routing and Traffic Control HOWTO


TC and CBQ seem to make out a great part in
(http://www.tldp.org/HOWTO/Adv-Routing-HOWTO.html) but you might visit
www.shorewall.net/ as well.

And should you want a commercial product (provided, if you want to
spend money), try something like 24online ..
http://www.24onlinebilling.com/

Raqueeb Hassan
Bangladesh

Mihai Osian wrote:
> mnis wrote:
>
>> Hi, can you recommend me software for traffic control and accounting.
>> I've been using ipac-ng so far but I need something with more features.
>> I also need to block internet access to users when they reach
>> specified number of MB.
>>
>> Thanks.
>
>
> For traffic accounting I tried several things and in the end I stopped
> at pmacct. It is based on libpcap, not on iptables rules. For limiting
> the traffic I don't know - you can try to run a cron script to verify
> the traffic and block the users that don't behave.
>
> Mihai


Can I use pmacctd to monitor multiple network interfaces or do I have to
start a new instance of pmacctd with its own config fajl for every
interface ?

mnis wrote:
> Mihai Osian wrote:
>
>> mnis wrote:
>>
>>> Hi, can you recommend me software for traffic control and accounting.
>>> I've been using ipac-ng so far but I need something with more features.
>>> I also need to block internet access to users when they reach
>>> specified number of MB.
>>>
>>> Thanks.
>>
>>
>>
>> For traffic accounting I tried several things and in the end I
>> stopped at pmacct. It is based on libpcap, not on iptables rules. For
>> limiting the traffic I don't know - you can try to run a cron script
>> to verify the traffic and block the users that don't behave.
>>
>> Mihai
>
>
>
> Can I use pmacctd to monitor multiple network interfaces or do I have to
> start a new instance of pmacctd with its own config fajl for every
> interface ?


I'm utterly lazy - anyone got a config file handy to monitor only
local<->remote packets? I dont care about the subnets.... wont you post
it please?

I've also tried various packages, and pmacct seems best - uses least cpu.

Multiple interfaces? I have no answer. I can imagine, check the config
format docs... the configs are pretty versatile... then again, no
problem with running 2 instances is there?

Another cool feature would be to count various types of traffic - ie..
http,smtp,27000-27025,etc...

....I'm awake when my world is half asleep
And lazy

Coenraad Loubser wrote:
> mnis wrote:
>
>> Mihai Osian wrote:
>>
>>> mnis wrote:
>>>
>>>> Hi, can you recommend me software for traffic control and accounting.
>>>> I've been using ipac-ng so far but I need something with more features.
>>>> I also need to block internet access to users when they reach
>>>> specified number of MB.
>>>>
>>>> Thanks.
>>>
>>>
>>>
>>>
>>> For traffic accounting I tried several things and in the end I
>>> stopped at pmacct. It is based on libpcap, not on iptables rules. For
>>> limiting the traffic I don't know - you can try to run a cron script
>>> to verify the traffic and block the users that don't behave.
>>>
>>> Mihai
>>
>>
>>
>>
>> Can I use pmacctd to monitor multiple network interfaces or do I have
>> to start a new instance of pmacctd with its own config fajl for every
>> interface ?
>
>
>
> I'm utterly lazy - anyone got a config file handy to monitor only
> local<->remote packets? I dont care about the subnets.... wont you post
> it please?
>
> I've also tried various packages, and pmacct seems best - uses least cpu.
>
> Multiple interfaces? I have no answer. I can imagine, check the config
> format docs... the configs are pretty versatile... then again, no
> problem with running 2 instances is there?
>
> Another cool feature would be to count various types of traffic - ie..
> http,smtp,27000-27025,etc...
>
> ...I'm awake when my world is half asleep
> And lazy

Here is my password

!
! pmacctd configuration example
!
! Did you know CONFIG-KEYS contains the detailed list of all
configuration keys
! supported by 'nfacctd' and 'pmacctd' ?
!
! debug: true
!
interface: eth0
daemonize: true
aggregate: src_mac,dst_mac,vlan,src_host,dst_host,src_port,ds t_port,proto

plugins: mysql
sql_db: pmacct
sql_table: acct_v2
sql_table_version: 2
sql_passwd: thisispassword
sql_user: pmacct
sql_refresh_time: 90
sql_host: localhost
sql_history: 5m


It seems that you cannot specify two or interfaces in one config.
You can count various types of traffic. You have fields dst_port and
src_port. You can also count on different protocols (tcp, udp, icmp).

mnis wrote:

[snip]

>
>
> It seems that you cannot specify two or interfaces in one config.
> You can count various types of traffic. You have fields dst_port and
> src_port. You can also count on different protocols (tcp, udp, icmp).
>
>

Indeed, I use two separate instances of pmacct, each with its own
configuration file - one for the internal and one for the external
interface.

Mihai