Gathering information about netfilter subsystem performance

Arturo Borrero Gonzalez <[email protected]> Mon, 23 Jul 2012 20:03:03 +0200
Newsgroups gmane.linux.debian.devel.firewall
Message-ID <CAPfcJau1Jcm1X3uONGbaeXdODOHDZdmg-m70nUgY=yoL-aF-KQ@mail.gmail.com>
Hi there!

I wrote a small script to easily obtain data about netfilter modules,
rules, conntrack and other memory usage. I always miss this kind of
statistics when managing a netfilter-based firewall.

I don't know how to collect info about cpu usage or make differences
between connections being tracked due to nat or state module in use.

I also asked at the netfilter mailing list, but I found small interest.

The code is here:
https://github.com/aborrero/nfstats

In the download section there is a debian binary package for install.

It would be nice if anyone could collaborate, give ideas or whatever.


Best regards.


-- 
#
# Arturo Borrero Gonzalez || [email protected]
# Use debian gnu/linux!
#