[H-GEN] Traffic analysis recommendations

[David de Groot]

Geoff Shang wrote:

> I'm on bigpond cable's 10 gig plan and was horrified to learn 
> yesterday that we'd exceeded our traffic for April (i.e. blown 10 gig 
> in 19 days). If my calculations are correct, this would mean an 
> average of 60 kbps traffic for the entire time.
>
Don't forget Bigpond measure upload and download as part of your quota.

> Whilst I'm certain this is not correct, I've not got any way of 
> tracking our usage and was wondering about recommendations.  I'd like 
> something that can:
>
> 1.  Show me how much data has travelled over an interface, with daily  
> and hourly breakdowns.
>
Cacti - uses snmp and rrdtool (mrtg successor) to graph traffic on a per 
interface level.  Web driven.

http://www.cacti.net/

> 2.  Show me this data in terms of particular ports used, preferably 
> also being able to separate downloads and uploads.
>
Network Top - it'll show you traffic breakdowns on port, source, 
destination, etc.  And has a nice web front end, and is relatively easy 
to configure.

http://www.ntop.org/ntop.html

> 3. Anything else that people might think is useful.
>
Configure up a firewall (iptables, ipf, ipfs, whatever) to block all 
inbound connections to you machine barring the ports you specifically 
wish to access from an external location.

Dave