Previous page: Single IPs or Ranges of IPs
Next page: Hourly Graphs

Ports

I wanted extra traffic graphs to monitor traffic for specific ports.   So I wrote the modification below.   However there is a far more elegant solution now and it can be found at http://www.sischmitz.de - I have test this on 1.4.21 and it is a very good solution. However if you want to do it the hard way, this page records my earlier mod.

Tested on 1.4.18

This is really a variation on the existing theme....

smtp

 

  1. Instead of specifying a single IP (ie 192.168.0.164) or range (ie 192.168.0.1/27) you must specify a port and protocol in /etc/rc.d/helper/writeipac.pl. The sample below will record smtp (port 25 tcp) traffic on the red interface
    print FILE "incoming REDSMTP ($iface)|ipac~o|$iface|tcp|0/0 25||\n";
    print FILE "outgoing REDSMTP ($iface)|ipac~i|$iface|tcp||0/0 25|\n";
    print FILE "forwarded incoming REDSMTP ($iface)|ipac~fi|$iface|tcp|0/0 25||\n";
    print FILE "forwarded outgoing REDSMTP ($iface)|ipac~fo|$iface|tcp||0/0 25|\n";
  2. The rest of the procedure is as per the single ip instructions with appropriate substitutions


^Top
Next page: Hourly Graphs