Re: PF + ALTQ - Bandwidth per customer
David Roseman <[email protected]>
| Newsgroups | gmane.os.freebsd.isp |
|---|---|
| Message-ID | <[email protected]> |
Well, have you run tcpdump on a network with 200Mb/s? The function is performed in the kernel, so its a lot more efficient than tcpdump. The monitor sorts by usage, so you can see which connection, IP or MAC is using the most traffic. When you're getting DOS attacked or have a worm you can find your problems instantly. It doesn't show each packet; it provides a listing of each connection, sorted from high to low usage. You can also use rules as filters, so you can quickly create complex filters. Turning tcpdump on a production shaper isn't an option. David --- On Mon, 12/1/08, Stanislav Sedov <[email protected]> wrote: > From: Stanislav Sedov <[email protected]> > Subject: Re: PF + ALTQ - Bandwidth per customer > To: [email protected] > Cc: [email protected], "Sebastian Tymków" <[email protected]>, "Marcello Barreto" <[email protected]>, [email protected] > Date: Monday, December 1, 2008, 5:23 PM > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On Sat, 29 Nov 2008 08:26:57 -0800 (PST) > David Roseman <[email protected]> mentioned: > > It also has a traffic monitor that is indispensable in > tracking down > > DOS attacks, worms and out of control servers. I'd > pay $500. just for the monitor. I have a problem, I fire up > the monitor and bingo, I find the > > problem. I think you can buy the lowest priced license > and still use the > > monitor and gather statistics no matter how large your > network is. > > > > How does this traffic monitor differ from tcpdump? From > pictures it looks like > just a web-interface for tcpdump and nothing more... > > - -- > Stanislav Sedov > ST4096-RIPE > -----BEGIN PGP SIGNATURE----- > > iEYEARECAAYFAkk0Y/sACgkQK/VZk+smlYFIMgCePZdDAbMJRrH/L7uvrTDoPGk6 > LfYAn1BWfBBDyTTmALteVUEFcxfMvOib > =jnfa > -----END PGP SIGNATURE----- > _______________________________________________ > [email protected] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-isp > To unsubscribe, send any mail to > "[email protected]" _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-isp To unsubscribe, send any mail to "[email protected]"