I wanted extra traffic graphs to monitor traffic for specific ports. So I wrote the modification below. However there is a far more elegant solution now and it can be found at http://www.sischmitz.de - I have test this on 1.4.21 and it is a very good solution. However if you want to do it the hard way, this page records my earlier mod.
Tested on 1.4.18
This is really a variation on the existing theme....
- Instead of specifying a single IP (ie 192.168.0.164) or range (ie 192.168.0.1/27) you must specify a port and protocol in /etc/rc.d/helper/writeipac.pl. The sample below will record smtp (port 25 tcp) traffic on the red interface
print FILE "incoming REDSMTP ($iface)|ipac~o|$iface|tcp|0/0 25||\n";
print FILE "outgoing REDSMTP ($iface)|ipac~i|$iface|tcp||0/0 25|\n";
print FILE "forwarded incoming REDSMTP ($iface)|ipac~fi|$iface|tcp|0/0 25||\n";
print FILE "forwarded outgoing REDSMTP ($iface)|ipac~fo|$iface|tcp||0/0 25|\n";
- The rest of the procedure is as per the single ip instructions with appropriate substitutions