Re: count traffic of web services OT

From: alex (ntnewsNOSPAM_at_hrz3.hrz.tu-darmstadt.de)
Date: 08/21/03 

Date: Thu, 21 Aug 2003 20:59:57 +0200

hi

> 1) What is the runtime overhead with this package? Does it poll the
> iptable counters at some reasonable period? Or does it assume I never
> reset the counters with any other applications that are running?
it runs at a period you config.... lets say 5 minutes. it saves the counters
to db and resets the counters on every run.

> 2) How does it deal with virtual hosting where you have 10 or 12 domains
> all served from the same ip address? As you know, arin insists that the
> only time you need a dedicated ip per domain is if that domain requires
> a secure SSL site also.
yeah - i've got enough IPs *g*. but maybe if you are able to create a JUMP
rule for finding out the domain name... i'm not sure if this is possible...
but maybe - i don't know.

> 3) Does it also report on ftp traffic to/from the html content storage
> servers? This question assumes the content, and ftp access, is stored
> on separate systems than the httpd servers.
it's based ob jump rules. you are able to calculate on every JUMP rule... if
you have a rule for FTP or HTTP you are able to calc it.

> I ask these questions as these are configurations that some of my
> customers are using. If it looks promising I will budget some time to
> look at the code.
very easy to setup... but i have had some diskussions with the developer
about the perl script reseting the iptables counter. and - yes with GBit
interfaces there will be a inaccuracy... but we are able to change this and
i will do this for me in near future. the basic bug is - he is testing if
the DB is up or not and in this milliseconds the traffic information is
lost... (bytes). if we change the script to reset the counter and display
the counters befor reseting (this is one iptables function) we are able to
fix this... priior to this task a ping to the db will make sure the DB is up
and running... my ideas :-). he said its a good idea but he'd like to create
binary for this task for speed purposes and remove the perlscript in
future...

Regards
Alex

Relevant Pages