[prev in list] [next in list] [prev in thread] [next in thread] 

List:       fedora-list
Subject:    Re: auditing network traffic
From:       Rick Stevens <ricks () alldigital ! com>
Date:       2018-11-27 23:07:39
Message-ID: b4fc6a6e-a05d-da84-3e03-9a1f81e46dcf () alldigital ! com
[Download RAW message or body]

On 11/27/18 2:22 PM, Roger Heflin wrote:
> if you have sar installed (package is sysstat) then sar -n DEV will
> give you 10 minute network counters, it will give you 1 minute data if
> you turn sar's sample timer down to 1 minute.
> 
> snmp if you router supports it, and I have also ssh'ed into my router
> ever X minutes and collected its network stats on routers that did not
> properly support snmp.

Which is why I suggested cacti/RRDTool. RRD does the SNMP fetch/decode,
cacti graphs it in a pretty readable format. All Linux systems support
SNMP. SOHO routers _may_ support it. Probably many don't.

> On Tue, Nov 27, 2018 at 2:28 PM Tim via users
> <users@lists.fedoraproject.org> wrote:
>>
>> Tim:
>>>> If I want to check on how much data my computer's been putting
>>>> through my ISP over the last few days, is there anything logged by
>>>> default that I can look at, or do need to install something extra?
>>
>> Ed Greshko:
>>> Are you saying you have a single system with only traffic going to
>>> the ISP?
>>
>> No, it's several devices going through a modem/router, which doesn't
>> really give enough info, so I was hoping I could find something on the
>> computer to rule it in or out as being the sudden upturn in traffic.
>>
>> While basic info is easy to find out (like how much data since it
>> connected), that doesn't tell me anything about what it used yesterday,
>> or the day before, etc.
>>
>> I'd been keeping an eye on that, day by day, manually, as I was getting
>> closer to going over my monthly quota, then suddenly I've been rated
>> limited as 12 gigs has gone through *somewhere*.
>>
>> To make matters worse, the rate limiting is so severe that many
>> websites just time out and fail (including the ISP's own website).
>> While the ISP claims that they throttle you, rather than charge you
>> more or cut you off, to allow you to continue using the internet until
>> the next month, it doesn't work.
>>
>> Conversely, when they had a network configuration fault that limited me
>> by the same amount, earlier this year, that speed was considered so
>> unusable as to be worthy of giving me a refund.
>>
>> It seems that in today's modern high-bandwidth internet, if you can't
>> finish loading a page in a few seconds, it aborts on you.  To be more
>> weird, the ISP has a transparent proxy, that ought to mitigate that
>> issue (they could grab the page in one go, and feed it to you slowly).
>> For the major ISP that is the backbone for the entire country, they're
>> very crap at doing their job.
>>
>> --
>> [tim@localhost ~]$ uname -rsvp
>> Linux 4.16.11-100.fc26.x86_64 #1 SMP Tue May 22 20:02:12 UTC 2018 x86_64
>>
>> Boilerplate:  All mail to my mailbox is automatically deleted.
>> There is no point trying to privately email me, I only get to see
>> the messages posted to the mailing list.
>>
>> If "2001: A Space Odyssey" taught us anything, it's that Siri will,
>> one day, murder us all.
>> _______________________________________________
>> users mailing list -- users@lists.fedoraproject.org
>> To unsubscribe send an email to users-leave@lists.fedoraproject.org
>> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>> List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
> _______________________________________________
> users mailing list -- users@lists.fedoraproject.org
> To unsubscribe send an email to users-leave@lists.fedoraproject.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
> 


-- 
----------------------------------------------------------------------
- Rick Stevens, Systems Engineer, AllDigital    ricks@alldigital.com -
- AIM/Skype: therps2        ICQ: 226437340           Yahoo: origrps2 -
-                                                                    -
-        Change is inevitable, except from a vending machine.        -
----------------------------------------------------------------------
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org

[prev in list] [next in list] [prev in thread] [next in thread]