Bandwidth per ip for monitoring

Help on building IPFire & Feature Requests
Post Reply
donaldo
Posts: 168
Joined: March 21st, 2013, 9:55 am

Bandwidth per ip for monitoring

Post by donaldo » May 5th, 2017, 7:49 am

Hi
i found that the OpenVPN Roadwarrior Statistics is very useful for see the bandwidth used by users connected in openvpn.

I thinks if this is used (how base) for see the bandwidth for user ip in the green to red (or vice versa) this is a very useful tool for monitoring the traffic in the network for user

Do you think this is possible?

thanks
Donatello

ummeegge
Community Developer
Community Developer
Posts: 5001
Joined: October 9th, 2010, 10:00 am

Re: Bandwidth per ip for monitoring

Post by ummeegge » May 6th, 2017, 8:05 pm

Hi Donatello,
if you want beneath --> http://wiki.ipfire.org/en/addons/iptraf-ng/start (logs are possible but consumes lots of disk space) or --> http://wiki.ipfire.org/en/addons/iftop/start , a history based monitoring it might be currently a bit complicated. Also support via WUI might be again more difficult since i do not know about some click and run examples in the forum here. Nevertheless longer time ago we tried to develop an possibility for such feature which calls Pmacct --> viewtopic.php?t=14849 but this entails a bigger heap of wood ::) .
May there are more or other ideas which i do not know about but may somebody else ???

Greetings,

UE
Image
Image

donaldo
Posts: 168
Joined: March 21st, 2013, 9:55 am

Re: Bandwidth per ip for monitoring

Post by donaldo » May 8th, 2017, 5:43 am

But all the other firewall old and new (ipcop, smoothwall, etc)have this bandwidth monitor for ip by default

and in medium - big network this is a necessary tools for monitoring the connection and to see the story in the past

sigh

:'(

ummeegge
Community Developer
Community Developer
Posts: 5001
Joined: October 9th, 2010, 10:00 am

Re: Bandwidth per ip for monitoring

Post by ummeegge » May 8th, 2017, 6:09 am

Hi,
i remember that Smoothwall have a feature like this (in Express version too ? ), but i can´t find it in IPCop, can you show it to me --> http://www.ipcop.org/2.0.0/en/admin/html/index.html ?
For all the other firewalls i can´t say something cause i do not know which you mean.

Nevertheless we are here in development section not on the wishlist so if you have ideas what and howto implement it let´s start ;) .

UE
Image
Image

bloater99
Posts: 482
Joined: October 13th, 2014, 3:47 pm

Re: Bandwidth per ip for monitoring

Post by bloater99 » May 8th, 2017, 2:46 pm

I would really appreciate this feature in the UI. Right now, I have to use iftop, which means quickly enabling SSH, then logging into the firewall to run iftop for a live view. Usually, though, I want to see who was hogging the network in the past, not in real-time.
Image

Image

donaldo
Posts: 168
Joined: March 21st, 2013, 9:55 am

Re: Bandwidth per ip for monitoring

Post by donaldo » May 8th, 2017, 2:52 pm

bloater99 wrote:I would really appreciate this feature in the UI. Right now, I have to use iftop, which means quickly enabling SSH, then logging into the firewall to run iftop for a live view. Usually, though, I want to see who was hogging the network in the past, not in real-time.
i have the same necessity
:'(

it's very useful

i hope that somebody can help us

bye
Donatello

ummeegge
Community Developer
Community Developer
Posts: 5001
Joined: October 9th, 2010, 10:00 am

Re: Bandwidth per ip for monitoring

Post by ummeegge » May 8th, 2017, 3:07 pm

No answers to my questions :'( OK no problem ;) .
Have had that too that i wanted really something, this was the point where i started to make something (which is linked above) so for me this is also OK so far.
Nevertheless, this feature might be great in the webuserinterface may someone do this job for us :D ?

UE
Image
Image

RRT4
Posts: 2
Joined: May 8th, 2017, 4:46 pm

Re: Bandwidth per ip for monitoring

Post by RRT4 » May 8th, 2017, 5:18 pm

IP accounting for all the traffic (not just what goes through the http proxy) is a very desirable feature in distro firewalls, but not effectively present in any (except in ipcop via a plugin).
As far as i know in pfSense (old version before 2.2.x) this function was performed via a plugin (bandwithd, removed in pfSense 2.3.x), now it can be accomplished via another plugin (darkstat) but it does not remember historical data after a reboot (bandwithd could be configured to save data).
Smoothwall Express has this feature but all data are lost/reset after a reboot or if the PPPoE goes down. Moreover at midnight there is a reset in visualitiation, so only the IPs that generate some traffic in the day are showed, for inactive IPs the data are hidden.
Ipcop achieves this functionality via a plugin
http://cybermainzel.de/download/download.php
http://www.ipcop-forum.de/forum/viewtop ... 57&t=31693
that works very well, all data are saved after a reboot and always displayed (only daily data are lost after reboot or if PPPoE goes down, weekly, monthly data remain). Moreover for every IPs, 8hours, daily, weekly, monthly, yearly graphs are generated.
It is a great plugin but IPcop is seldom updated, stable version since two years, svn since more than a year.
Maybe this plugin could be ported to ipfire, considering the affinities between the two firewall, possibly opening a ipfire whishlist.

cibgiu
Posts: 28
Joined: November 7th, 2012, 12:53 pm

Re: Bandwidth per ip for monitoring

Post by cibgiu » May 8th, 2017, 6:21 pm

Hi,

I think if one put many sw pieces on one box then there will be more potential bugs.
Keep it simple in some case is the best way.

A possible solution is to use a little switch with port mirroring and a linux box with http://www.ntop.org/products/traffic-analysis/ntop/.

Giuseppe

ummeegge
Community Developer
Community Developer
Posts: 5001
Joined: October 9th, 2010, 10:00 am

Re: Bandwidth per ip for monitoring

Post by ummeegge » May 8th, 2017, 8:05 pm

Thanks for the infos,
i think you can find some more private developed software for IPCop in that manner e.g. --> https://keystoneit.wordpress.com/2009/1 ... op-1-2-20/ but i think the main distro do not provide such a feature.
nDPI for example has been build from a IPFire user here and is avaliable for testings --> https://forum.ipfire.org/viewtopic.php? ... 05975which might be one step further for the Ntop thing. Darkstat might also be an easier way in my opinion since both do have their own WI.
So which pros and cons do you all find in the mentioned possibilities ? Is here an interest to get in a discussion howto develop such a feature and to take a step into it or do you prefer to bring it as a suggestion to the wishlist ?

Greetings,

UE
Image
Image

RRT4
Posts: 2
Joined: May 8th, 2017, 4:46 pm

Re: Bandwidth per ip for monitoring

Post by RRT4 » May 9th, 2017, 1:21 pm

The key is that the plugin/addon/extension that registers the iptraffic, save the data after a reboot. It does not make sense that the values ​​are recorded and cataloged for week/month /year if then are lost on reboot. As I have noticed, this happens only with the addon for ipcop iptraffic. All other implementations in other firewalls have this problem (in SE there was a plugin, BandviewX, which just had this data backup function, but it was not properly ported to SE v3.1 so is not currently usable). I do not know if there are people who have uptime for months, but for people like me who every 10/20 days reboot the firewall (or makes a PPPoE reconnection), all data are lost and no statistics can be made based on a large amount of time.
For what I read Darkstat does not save the data at reboot and also in the normal UI it shows the bytes transferred for each connection. This is not necessary (maybe by clicking somewhere, it may be useful to have so detailed infos), but in normal condition it is sufficient only to display total input and output traffic for each lan ip.
I do not know Ntop, here seems that Pro Small Business version allows to view historical data
http://www.ntop.org/ntopng/exploring-hi ... ng-part-2/
so maybe the free version does not.
However IMO the best solution would be, rather than a link in Ipfire WI that opens the UI of a different applications (as is the case now for the sarg interface), that all data collection system was integrated in Ipfire WI, but it's just my wish because I do not have any knowledge of how to do it.

ummeegge
Community Developer
Community Developer
Posts: 5001
Joined: October 9th, 2010, 10:00 am

Re: Bandwidth per ip for monitoring

Post by ummeegge » July 3rd, 2017, 6:49 pm

This --> https://forum.ipfire.org/viewtopic.php? ... 89#p108889 might be also a possibility.

Greetings,

UE
Image
Image

thebraz
Posts: 9
Joined: April 20th, 2017, 1:13 pm

Re: Bandwidth per ip for monitoring

Post by thebraz » July 5th, 2017, 12:27 pm

I hope Ipfire adds somenthing like this but in the meantime.............

https://docs.opnsense.org/manual/how-tos/insight.html

I think this is what you're looking for

Best wishes

donaldo
Posts: 168
Joined: March 21st, 2013, 9:55 am

Re: Bandwidth per ip for monitoring

Post by donaldo » July 18th, 2017, 1:20 pm

thebraz wrote:
July 5th, 2017, 12:27 pm
I hope Ipfire adds somenthing like this but in the meantime.............

https://docs.opnsense.org/manual/how-tos/insight.html

I think this is what you're looking for

Best wishes
wow, spectacular

a very complete analysing tools

bortek
Posts: 10
Joined: December 1st, 2018, 9:41 am

Re: Bandwidth per ip for monitoring

Post by bortek » December 25th, 2019, 6:49 pm

Hi

I am looking for a way to display statistics of data usage per host on my LAN. Now to be precise I am not interested in real-time data since we already know how to achieve it. What I want is to see a data usage per host, broken down per-hour, day, week, etc.

How do I do it?

Post Reply