[H-GEN] Network statistic software

[Christopher LeMoyne]

Troy Piggins wrote:

>[ Humbug *General* list - semi-serious discussions about Humbug and     ]
>[ Unix-related topics. Posts from non-subscribed addresses will vanish. ]
>
>Hi.  I have a RH9 gateway/firewall for a small LAN.  This last
>month our Bigpond usage has gone through the roof ( ie more than the
>3Gb limit, when we had been surviving on 1Gb for about a year).  As
>far as I know, nothing has changed network-wise, and I want to know
>if it is someone deciding to download heaps of stuff, or where all
>that data usage is going.
>
>Last month was also up on usage, but I had installed WinXP SP2 on
>all machines, and it wasn't until half finished before I woke up to
>the fact that I could've done the admin SP download only once
>instead of the 250Mb (or whatever) per machine. (I am not a real
>admin :-) )
>
>Anyway, what (free) tools can I use to monitor where the internet
>traffic is going to internally.  That is, my gateway is running
>iptables with port forwarding.  I want to know what IP the data from
>the internal network interface is going.
>
>Can this be done from iptables directly, or I have heard of netstat,
>and mrtg, but haven't really used them.  Is there something else?
>
>  
>

Hi Troy,

# apt-cache search net | grep -i monitor
apt-watch - Monitor apt sources for upgrades
arpwatch - Ethernet/FDDI station activity monitor.
atop - Monitor for system resources and process activity
distccmon-gnome - GTK monitor for distcc a distributed client and server
dmachinemon - Network-wide monitoring suite for monitoring machine status
dmachinemon-master - Network-wide machine monitoring suite -- master
dmachinemon-servent - Network-wide monitoring suite -- servent
dmachinemon-treeview - Network-wide machine monitoring suite - topology 
viewer
etherape - Graphical network monitor modeled after etherman
ethstatus - Console-based ethernet statistics monitor
ftm - Frogfoot Networks Traffic Monitoring Utility
gkrellm - Multiple stacked system monitors: 1 process [client]
gkrellm-common - Multiple stacked system monitors: 1 process [common files]
gkrellmd - Multiple stacked system monitors: 1 process [daemon]
gkrellmwireless - 802.11 wireless link monitor plugin for GKrellM
hardware-monitor - Monitor applet for the Gnome panel
ipband - daemon for subnet bandwidth monitoring with reporting via email
iptotal - monitor for IP traffic, not requiring SNMP
iptraf - Interactive Colorful IP LAN Monitor
jmon - distributed resource monitor
kismet - Wireless 802.11b monitoring tool
libgtop-daemon - gtop daemon for monitoring remote machines (part of Gnome)
libgtop-dev - Dev libraries for gtop system monitoring library (part of 
Gnome)
libgtop1 - Libraries for gtop system monitoring library (part of Gnome)
libgtop2 - Libraries for gtop system monitoring library (part of Gnome 2)
libgtop2-daemon - gtop daemon for monitoring remote machines (part of 
Gnome 2)
libgtop2-dev - Dev libraries for gtop system monitoring library (part of 
Gnome 2)
libopm-dev - Development files for the blitzed open proxy monitor library
libopm0 - Blitzed open proxy monitor library
mon - monitor hosts/services/whatever and alert about problems
nabi - A Korean X input method server plus imhangul status monitor
nagios-mysql - A host/service/network monitoring and management system
nagios-pgsql - A host/service/network monitoring and management system
nagios-plugins - Plugins for the nagios network monitoring and 
management system
nagios-text - A host/service/network monitoring and management system
netspeed - Traffic monitor applet for Gnome2
nload - A realtime console network usage monitor
nsca - Nagios service monitor agent
pc532down - Downloader for pc532 monitor ROM.
pload - Program to monitor network device statistics
powstatd - Configurable UPS monitoring daemon
powstatd-crypt - Configurable UPS monitoring daemon
procmeter - X based system status monitor, older version
procmeter3 - graphical system status monitor
rnas-gtk - Network-wide monitoring suite for monitoring machine status
root-portal - Monitors the system and displays the results on the desktop
slmon - A simple S-Lang based system performance monitor
slurm - Realtime network interface monitor
spong-client - A systems and network monitoring system -- client programs
spong-common - A systems and network monitoring system -- common libraries
spong-server - A systems and network monitoring system -- server programs
spong-www - A systems and network monitoring system -- web interface
squidview - monitors and analyzes squid access.log files
tcpdump - A powerful tool for network monitoring and data acquisition
tcpquota - A dialout/masquerading monitoring package.
tkping - Perl/Tk app. - Monitor hosts on network
upsd - UPS Monitor Program via serial interface
wavemon - Wireless Device Monitoring Application
whowatch - Real-time user logins monitoring tool.
wmifs - WindowMaker dock app for monitoring network traffic
wminet - An inetd monitoring dockapp designed for WindowMaker
wmmemload - WindowMaker dock app to monitor memory and swap usage
wmnd - Dockapp monitoring network interfaces
wmnd-snmp - Dockapp monitoring network interfaces
wmnet - network monitor for WindowMaker using kernel IP accounting
wmnetmon - A dockapp for monitoring services on up to 40 hosts
wmpload - Program to monitor network device statistics
wmppp.app - PPP dial control and network load monitor with NeXTStep look
wmwave - Monitor status of an 802.11 wireless ethernet link
xfce4-netload-plugin - Network load monitor plugin for the XFce4 panel
xosview - X based system monitor

Above output is a package search on my Debian box for all packages that 
had "net" and "monitor" in them.  Not all of the results are suitable to 
your request, but I was too lazy to go thru the list manually.  :-)  If 
I were you, I'd read thru the list and do a google for any packages that 
particularly interest you, but ipband, iptotal, and iptraf look like a 
good start.  You'll need an RPM to install on a RedHat box, unless you 
know what you're doing enough to download the source code .tgz and 
compile it yourself (it's always scary the first time - especially on a 
RedHat box where some of the paths aren't standard).

Another good place to start is http://www.freshmeat.net/  - you can do 
searches for software using keywords, and with free registration, you 
can narrow down the results by license (ie, GPL, BSD, etc), platform 
(console, X-Windows), etc.

Regards,
Christopher