*BSD News Article 66827


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!news.cs.su.oz.au!metro!metro!asstdc.scgt.oz.au!nsw.news.telstra.net!act.news.telstra.net!vic.news.telstra.net!news.mira.net.au!news.vbc.net!news.cais.net!newsfeed.internetmci.com!howland.reston.ans.net!Germany.EU.net!zib-berlin.de!news.tu-chemnitz.de!benjy.csn.tu-chemnitz.de!mha
From: Michael Hasenstein <mha@informatik.tu-chemnitz.de>
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: FreeBSD and network accounting
Date: Wed, 24 Apr 1996 08:49:05 +0200
Organization: University of Technology Chemnitz, FRG
Lines: 29
Message-ID: <Pine.LNX.3.92.960424084114.105B-100000@benjy.csn.tu-chemnitz.de>
References: <4lgfmj$n64@narses.hrz.tu-chemnitz.de> <4ljd8j$ng0@uriah.heep.sax.de>
NNTP-Posting-Host: benjy.csn.tu-chemnitz.de
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Sender: mha@benjy.csn.tu-chemnitz.de
To: Joerg Wunsch <joerg_wunsch@uriah.heep.sax.de>
In-Reply-To: <4ljd8j$ng0@uriah.heep.sax.de>

On 23 Apr 1996, J Wunsch wrote:

> Volker.Holfeld@E-Technik.TU-Chemnitz.DE writes:
>
> >I'm looking for a net accounting daemon like net-acct for Linux.
>
> I don't know net-acct.  However, starting with 2.1R, FreeBSD ships
> some code that allows for IP accounting.  It is an option for the
> `firewall' (better: adress filter) code.
>
> RTFM ipfirewall(4), ipaccounting(4), ipfw(8).

We DO know that, but it's useless, since we need to save the output of
nacctd to disc, i.e. each connection, for that we can trace problems
later. We use a second (linux)firewall which does this, and we get a 500KB
file each day representing >1GB of outgoing traffic from the student
network. The second router is used for the other half of our network.

tcpdump is also useless, since it puts a device into promiscous mode,
which makes the accounting files far too big. I can tell nacctd to only
count packets that go through the router.

--
*******************************************************************
email: Michael.Hasenstein@informatik.tu-chemnitz.de (MIME welcome)
homepage: http://www.tu-chemnitz.de/~mha
my private pc: benjy.csn.tu-chemnitz.de (Linux!!) or 134.109.104.2
*******************************************************************