[wellylug] messages file - was: traffic accounting]

[William Hamilton]

William Hamilton wrote:
> Hi all looking for some comments as to what traffic accounting software 
> people are using.  I have a client with multiple machines internally 
> with a shorewall firewall.  They would like to start accounting for 
> traffic volumes, volume and type of data.
> 
> Any suggestions.  I can use accounting in shorewall but is there 
> anything better and easier to report on?
> 
  >Adding to my own email..  they are looking to track usage down to each
 >internal machine.

Once again adding to my email BUT a new one almost.  Having setup 
accounting within shorewall I found that /var/log/messages is being 
created as a directory NOT as a file (this making logging difficult).

Any ideas as to why this is happening and how to fix?  The setup is 
fairly new, not far of base Debian stable build (addition of a firewall 
packages etc).

tia

W