<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.12.1">
</HEAD>
<BODY>
On Fri, 2007-01-05 at 09:13 +1300, William Hamilton wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE>
<FONT COLOR="#000000">William Hamilton wrote:</FONT>
<FONT COLOR="#000000">> Hi all looking for some comments as to what traffic accounting software </FONT>
<FONT COLOR="#000000">> people are using. I have a client with multiple machines internally </FONT>
<FONT COLOR="#000000">> with a shorewall firewall. They would like to start accounting for </FONT>
<FONT COLOR="#000000">> traffic volumes, volume and type of data.</FONT>
<FONT COLOR="#000000">> </FONT>
<FONT COLOR="#000000">> Any suggestions. I can use accounting in shorewall but is there </FONT>
<FONT COLOR="#000000">> anything better and easier to report on?</FONT>
<FONT COLOR="#000000">> </FONT>
<FONT COLOR="#000000">> tia</FONT>
<FONT COLOR="#000000">> </FONT>
<FONT COLOR="#000000">> W</FONT>
<FONT COLOR="#000000">> </FONT>
<FONT COLOR="#000000">> </FONT>
<FONT COLOR="#000000">Adding to my own email.. they are looking to track usage down to each </FONT>
<FONT COLOR="#000000">internal machine.</FONT>
</PRE>
</BLOCKQUOTE>
<BR>
ntop might be useful for this, but you'd need to have a switch that does port mirroring between the LAN and the gateway router, or you could run ntop on your FW or GW router if they're linux boxes.<BR>
<BR>
jamie
</BODY>
</HTML>