[mrtg] Re: ip accounting

[Lars Holmström]

I am using ipchains.

First I define a few ipchains rules
/sbin/ipchains -I input  --protocol tcp --source-port 110 -j pop3in
/sbin/ipchains -I output --protocol tcp --source-port 110 -j pop3out

I modifieda script from the contribution directory

#!/usr/bin/perl

# ipchainacc version 1.1.0
# Author: John Lange, john at darkcore.net
# Date: September 12, 2000
#
# This script was written to provide output for MRTG
#  (multi router traffic grapher) via ipchains.
#
# http://ee-staff.ethz.ch/~oetiker/webtools/mrtg/mrtg.html
#
## Changelog
# Sept 12, 2000
# v1.1.0 added flag for selection of graphing either packets, or bytes.
#        The default is packets (which is pretty useless), but since
#        the previous releases were graphing packets I kept the default
#        the same.
#        I always meant for this to be bytes but I only recently noticed
#        this bug so I added a config flag for bytes.
#        Also changed the uptime slightly, but its still broken. When
#        goes past 99 days, it will hack the last digit off (used to happen
#        after 9 days)
#
# June 22, 2000
# v1.0.1 added -x to ipchains to expand byte counters
#
# v1.0.0 Inital Release
#
#
#   This command must return 4 lines of output:
#     Line 1 : current state of the 'incoming bytes counter'
#     Line 2 : current state of the 'outgoing bytes counter'
#     Line 3 : string, telling the uptime of the target.
#     Line 4 : string, telling the name of the target.

# This script relies on you having setup your ipchains rules beforehand

#--- sample ipchains rules that will work with this script
## Add some empty rules for accounting purposes only
#
#/sbin/ipchains -F acctin
#/sbin/ipchains -F acctout
#
## add the new rules
#/sbin/ipchains -N acctin
#/sbin/ipchains -N acctout
#
## empty rules on the chains
#/sbin/ipchains -A acctin
#/sbin/ipchains -A acctout
#
#/sbin/ipchains -I input -j acctin
#/sbin/ipchains -I output -j acctout
#----------- end ---------------

## edit for your system

$ipchains='/sbin/ipchains';   # path to ipchains
$host=`/bin/hostname --fqdn`;  # local hostname (for information only)

# if you use the ipchains rules above, you don't have to change these
# ===================
$inrule='pop3in';  # name of input accounting rule
$outrule='pop3out'; # name of output accounting rule
# ===================
# What should we graph? packet counters = 0, bytes = 1
# If you used this script before and you want to keep counting
# packets, then set this to 0. If you would rather do the
# sensible thing and count bytes, then set this to 1. If you change
# from one to the other, then you should delete all the previous
# history since it will be meaningless.
$bytec=1;

## -- don't edit below here ----

# fetch the status from ipchains
$_=`$ipchains -L $inrule -v -n -x |grep -v -i Chain |grep -v -i pkts`;
@in_bytes = split;
printf "$in_line";   # just for debugging

$_=`$ipchains -L $outrule -v -n -x |grep -v -i Chain |grep -v -i pkts`;
@out_bytes = split;
printf "$out_line";    # just for debugging

#$c=1;
#foreach $value (@in_bytes) {
#  printf "$c: $value\n";
#  $c++;
#};

# uptime of the machine
open(UPTIME,"uptime |cut -b 13-27|");
$upTime=<UPTIME>;
close(UPTIME);
chop $upTime;

# 4 lines of output only.
printf "$in_bytes[$bytec]\n$out_bytes[$bytec]\n$upTime\n$host";


Last I put the folloing in mrtg.cfg
# ***** POP3 *****
#
Target[pop3chains]: `/home/mrtg-2.9.4/bin/ipchainacc-pop3`
SetEnv[pop3chains]: MRTG_INT_IP="" MRTG_INT_DESCR="ipchain acc int_descr"
MaxBytes[pop3chains]: 1250000
Title[pop3chains]: POP3
PageTop[pop3chains]: <H1>POP3 bytes</H1>
 <TABLE>
   <TR><TD>System:</TD>     <TD>www.xyz.net</TD></TR>
   <TR><TD>Maintainer:</TD> <TD>xyz</TD></TR>
   <TR><TD>Description:</TD><TD>Internet interface</TD></TR>
   <TR><TD>ifType:</TD>     <TD>Ethernet(7)</TD></TR>
   <TR><TD>ifName:</TD>     <TD></TD></TR>
   <TR><TD>Max Speed:</TD>  <TD>10 Mbit/s</TD></TR>
 </TABLE>
#


/Lars


"KAUSHIK B (NETWORKING)" wrote:

> what are you using ?
> ipchains  or iptables ?
> can you please explain how you went about it .
>
> thanks and regds
>
> kaushik
>
> -----Original Message-----
> From: Lars Holmström [mailto:lars.holmstrom at flysta.net]
> Sent: Friday, June 29, 2001 10:32 PM
> Cc: mrtg at list.ee.ethz.ch
> Subject: [mrtg] Re: ip accounting
>
> No I believe IPaccounting is enabled at least from kernel 2.2-14 (which I am
> running).
> What you have to do is to create the scripts to feed MRTG
> /Lars
>
> "KAUSHIK B (NETWORKING)" wrote:
>
> > I read that ip accounting has to be specifically enabled in the kernel.
> > I went through xconfig and but couldn't get the option for ip accounting .
> >
> > Though i did compile the kernel again ver 2.4.4 but it doesnt seem to be
> > working .
> > Suggestions are  most welcome .
>
> --
> Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
> Archive     http://www.ee.ethz.ch/~slist/mrtg
> FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
> WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi
>
> --
> Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
> Archive     http://www.ee.ethz.ch/~slist/mrtg
> FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
> WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi


--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi