[lug] Bandwidth Monitoring

[George Sexton]

> -----Original Message-----
> From: lug-bounces at lug.boulder.co.us [mailto:lug-
> bounces at lug.boulder.co.us] On Behalf Of Zan Lynx
> Sent: Monday, March 21, 2011 1:32 PM
> To: lug at lug.boulder.co.us
> Subject: Re: [lug] Bandwidth Monitoring
> 
> On 3/21/2011 11:30 AM, George Sexton wrote:
> > I'm looking for a network usage monitor for Linux. The features I
> would like
> > are:
> >
> > Lightweight - prefer console based, and not X11 since this is for
> remote
> > machines.
> >
> > Show one minute and 5 minute usage by IP Address, aggregating by
> port/ip
> > address, sorted by bytes or packets descending.
> >
> > I don't want to use wireshark because it's X11. IPTraf is OK, but it
> doesn't
> > really show what I need. It can show every connection, or usage by
> port but
> > it doesn't aggregate by IP for a history. TCPDump gives tons of
> detail but
> > it's hard to get the overall information when you're seeing hundreds
> of
> > packets per second go by.
> >
> > I've thought of writing a filter that uses TCPDump as a data source
> but I
> > want to see if there's something out there that will solve my problem
> > without having to write some code.
> 
> I haven't heard of anything that does all you want. You might need to
> write your own.
> 
> It looks like there's a Perl module Net::Pcap that will interface to
> the
> pcap library (same as what tcpdump uses).

Perl is the one language I've never learned. C, C++, Delphi/Pascal, xBase,
C#, Java, Basic, Javascript, 6502 Assembler, Bash, VBScript/ASP, SQL/TSql,
and others my tired brain can't recall.

I'll probably write a Java program that uses tcpdump or tshark as the data
source and then parse the data stream.

> 
> It should be pretty straightforward then to record and report the stats
> you want.
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
> Join us on IRC: irc.hackingsociety.org port=6667
> channel=#hackingsociety



George Sexton
MH Software, Inc.
303 438-9585
www.mhsoftware.com