11 Jun
2013
11 Jun
'13
1:51 p.m.
Hello,
Sometimes customers approach their data transfer quota and are
warned, but don't know the best way to see what is going on.
Typically they want a breakdown of bandwidth usage by remote host,
from a single host (their VPS).
I know what I tend to use for this, but I was wondering what the
rest of you use?
I might summarise it into a wiki page that I can show to the next
person who asks.
Cheers,
Andy
--
http://bitfolk.com/ -- No-nonsense VPS hosting
13 Jun
13 Jun
3:49 p.m.
On Tue, Jun 11, 2013 at 01:51:06PM +0000, Andy Smith wrote:
Sometimes customers approach their data transfer quota
and are
warned, but don't know the best way to see what is going on.
Typically they want a breakdown of bandwidth usage by remote host,
from a single host (their VPS).
I know what I tend to use for this, but I was wondering what the
rest of you use?
No one knows? Or you're all too shy?
Okay, I'll start.
I mostly just use simple bandwidth graphing in cacti to see when
there's anything out of the ordinary and then use tcpdump/wireshark
to work out what is the abnormal traffic.
If it's more complicated than that then I'll use ntop to get a
breakdown by IP address and port/protocol.
Cheers,
Andy
--
http://bitfolk.com/ -- No-nonsense VPS hosting
The optimum programming team size is 1.
Has
Jurassic Park taught us nothing? — pfilandr
4:02 p.m.
On Thu, Jun 13, 2013 at 5:49 PM, Andy Smith <andy(a)bitfolk.com> wrote:
I mostly just use simple bandwidth graphing in cacti to see when
there's anything out of the ordinary
vnStat is another simple and console based traffic monitor:
http://humdi.net/vnstat/
Regards,
Daniel
4:36 p.m.
Sent from my BlackBerry 10 smartphone.
From: Daniel Néri
Sent: Thursday, 13 June 2013 17:02
To: Andy Smith
Cc: users(a)lists.bitfolk.com
Subject: Re: [bitfolk] single-host bandwidth analysis tools
On Thu, Jun 13, 2013 at 5:49 PM, Andy Smith <andy(a)bitfolk.com> wrote:
I mostly just use simple bandwidth graphing in cacti to see when
there's anything out of the ordinary
vnStat is another simple and console based traffic monitor:
http://humdi.net/vnstat/
Regards,
Daniel
_______________________________________________
users mailing list
users(a)lists.bitfolk.com
https://lists.bitfolk.com/mailman/listinfo/users
4:41 p.m.
I use collectd and a few quick perl scripts to monitor and alert on overall
VM usage (including network traffic); but if I'm investigating a problem a
combination of tcpdump, netstat and iftop are my weapons of choice to help
drill down to what is chewing bandwidth. I've never really had to break
those out for my BitFolk VM, but I do quite regularly for my home server
(due to greater bandwidth limitations).
~Mat
On 13 June 2013 16:49, Andy Smith <andy(a)bitfolk.com> wrote:
On Tue, Jun 11, 2013 at 01:51:06PM +0000, Andy Smith
wrote:
Sometimes customers approach their data transfer
quota and are
warned, but don't know the best way to see what is going on.
Typically they want a breakdown of bandwidth usage by remote host,
from a single host (their VPS).
I know what I tend to use for this, but I was wondering what the
rest of you use?
No one knows? Or you're all too shy?
Okay, I'll start.
I mostly just use simple bandwidth graphing in cacti to see when
there's anything out of the ordinary and then use tcpdump/wireshark
to work out what is the abnormal traffic.
If it's more complicated than that then I'll use ntop to get a
breakdown by IP address and port/protocol.
Cheers,
Andy
--
http://bitfolk.com/ -- No-nonsense VPS hosting
The optimum programming team size is 1.
Has Jurassic Park taught us nothing? — pfilandr
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEAREDAAYFAlG56hsACgkQIJm2TL8VSQvAWQCgxdU4rOAmAqzNFjLuuAlMx0jt
3goAnAsjPGBGKSPszM4LovdFkroNVJSn
=RA3m
-----END PGP SIGNATURE-----
_______________________________________________
users mailing list
users(a)lists.bitfolk.com
https://lists.bitfolk.com/mailman/listinfo/users
5:58 p.m.
On 13/06/2013 16:49, Andy Smith wrote:
I mostly just use simple bandwidth graphing in cacti
to see when
there's anything out of the ordinary and then use tcpdump/wireshark
to work out what is the abnormal traffic.
If it's more complicated than that then I'll use ntop to get a
breakdown by IP address and port/protocol.
mrtg for traffic level; ipaudit (getting rather long in the tooth now)
for daily/weekly/monthly stats and wireshark or ntop for more detailed
inspection.
If anybody knows of a good ipaudit replacement I'd be interested...
Cheers,
Mike
14 Jun
14 Jun
2:49 p.m.
On 13/06/13 18:58, Mike Zanker wrote:
On 13/06/2013 16:49, Andy Smith wrote:
Another nod for vnstat. I have also used mrtg in the past and that's
nice as well.
I also use iftop to see what's happening on a server at that time.
--
Matthew Moore
Surgical Materials Testing Laboratory
System Administrator
Telephone: +44 (0)1656 752165
Email: matt(a)smtl.co.uk
I mostly just use simple bandwidth graphing in
cacti to see when
there's anything out of the ordinary and then use tcpdump/wireshark
to work out what is the abnormal traffic.
If it's more complicated than that then I'll use ntop to get a
breakdown by IP address and port/protocol.
mrtg for traffic level; ipaudit (getting rather long in the tooth now)
for daily/weekly/monthly stats and wireshark or ntop for more detailed
inspection.
If anybody knows of a good ipaudit replacement I'd be interested...
3972
days inactive
3975
days old
6 comments
6 participants
participants (6)
-
Andy Smith -
Daniel Néri -
James P. Wilkinson -
Mat Johns -
Matthew Moore -
Mike Zanker