Simple daemon to log bandwidth usage per port/host?

Hi,

I've been searching for the past couple of days, and getting pretty
frustrated in my efforts. Could anyone point me to a simple daemon
that is capable of logging bandwidth usage on a "per port/host" basis.

For instance, I would like a running log of the total amount of
traffic on port 119 from my ISP's news server to my machine. I've
seen some apps that look capable of doing such a thing, but they
mostly seem to be horribly complex things that require PHP, SQL,
iptables-accounting, etc. It all seems to be complete overkill for
my purposes. The simpler daemon type apps seem to be only capable
of generating per-interface stats.

I just want a simple daemon that will generate a textual log of
traffic totals and can differentiate hosts/ports. Maybe something
using libpcap or similar.

Any ideas?

TIA,
Jonathan

--
Don't just hit reply. Email address is broken. Thank
your friendly neighborhood spammer. Email replies to:
user: jnthn1 domain: earthlink<dot>net

Jonathan A. wrote:

>
> Hi,
>
> I've been searching for the past couple of days, and getting pretty
> frustrated in my efforts. Could anyone point me to a simple daemon
> that is capable of logging bandwidth usage on a "per port/host" basis.
>
> For instance, I would like a running log of the total amount of
> traffic on port 119 from my ISP's news server to my machine. I've
> seen some apps that look capable of doing such a thing, but they
> mostly seem to be horribly complex things that require PHP, SQL,
> iptables-accounting, etc. It all seems to be complete overkill for
> my purposes. The simpler daemon type apps seem to be only capable
> of generating per-interface stats.
>
> I just want a simple daemon that will generate a textual log of
> traffic totals and can differentiate hosts/ports. Maybe something
> using libpcap or similar.
>
> Any ideas?
>
> TIA,
> Jonathan
>

IPTraf?
http://iptraf.seul.org/

On Fri, 17 Oct 2003 19:41:10 GMT, Klaatu
<mutster8_nospam_@netscape.net> appears to have said:

> Jonathan A. wrote:
>>
>> I just want a simple daemon that will generate a textual log of
>> traffic totals and can differentiate hosts/ports. Maybe something
>> using libpcap or similar.
>
> IPTraf?

Well, it's possible to run iptraf in background with a filter set to
monitor just the host/port I'm interested in. Only problem is, I use
iptraf in interactive mode a lot, and I don't see any way to change
the filters in interactive mode that wouldn't also apply next time I
start in "daemon" mode.

IOW, I would have to be careful to remember to re-apply the filter
every time I removed it in interactive mode, if I want to keep
background mode from logging everything next time it starts. It's
a thought, but something more "fire and forget" would be much more
manageable over the long term.

ciao,
Jonathan

--
Don't just hit reply. Email address is broken. Thank
your friendly neighborhood spammer. Email replies to:
user: jnthn1 domain: earthlink<dot>net