[kwlug-disc] Monitoring network spikes (redux?)

[Paul Nijjar]

I have spent 1.5 days trying to get bandwidthd-pgsql to work on
Debian. So frustrating! It doesn't come with any apache configuration
and there is no index page. 

I know there is a pfSense package for bandwidthd. I am reluctant to
install packages on such an important pfSense box, but I might try it. 

In the meantime I have tried darkstat, which is working okay. I have a
plausible story for what is happening now (thank you Symantec) but I
do not have a complete story yet. I am still getting giant spikes in
traffic and I don't know why.

- Paul

On Sat, Sep 22, 2012 at 12:44:20PM -0400, L.D. Paniak wrote:
> On pfsense and Linux gateways, I've had some luck with bandwidthd.  It
> gives a web interface that shows in/out data usage over
> day/week/month/year per IP address for each of tcp, http, UDP (eg
> VoIP,Skype)...  It works best if your address pool is relatively
> static.  What it does not do is give information on the remote
> source/destination of packets.  I found this is not too much of a
> shortcoming as you can use other tools already mentioned to get this
> info once you know the IP address of the potential scofflaw.
>