gpg: Signature made Thu Jun 13 15:49:47 2013 UTC
gpg: using DSA key 2099B64CBF15490B
gpg: Good signature from "Andy Smith <andy@strugglers.net>" [unknown]
gpg: aka "Andrew James Smith <andy@strugglers.net>" [unknown]
gpg: aka "Andy Smith (UKUUG) <andy.smith@ukuug.org>" [unknown]
gpg: aka "Andy Smith (BitFolk Ltd.) <andy@bitfolk.com>" [unknown]
gpg: aka "Andy Smith (Linux User Groups UK) <andy@lug.org.uk>" [unknown]
gpg: aka "Andy Smith (Cernio Technology Cooperative) <andy.smith@cernio.com>" [unknown]
On Tue, Jun 11, 2013 at 01:51:06PM +0000, Andy Smith wrote:
> Sometimes customers approach their data transfer quota and are
> warned, but don't know the best way to see what is going on.
> Typically they want a breakdown of bandwidth usage by remote host,
> from a single host (their VPS).
>
> I know what I tend to use for this, but I was wondering what the
> rest of you use?
No one knows? Or you're all too shy?
Okay, I'll start.
I mostly just use simple bandwidth graphing in cacti to see when
there's anything out of the ordinary and then use tcpdump/wireshark
to work out what is the abnormal traffic.
If it's more complicated than that then I'll use ntop to get a
breakdown by IP address and port/protocol.
Cheers,
Andy
--
http://bitfolk.com/ -- No-nonsense VPS hosting
> The optimum programming team size is 1.
Has Jurassic Park taught us nothing? — pfilandr
