Linux router traffic monitoring, how? netflow?
mkaipov at outlook.com
Fri Nov 14 07:35:44 UTC 2014
Netflow will be the best solution to find the host that's generate load. First you need decide what netflow analyzer you'll use. I know about some plugin to Cacti. Than you need install IPT-NETFLOW to your Ubuntu router.
Also you have another way, you can monitor (snmp traffic) all ports on switches and then find analyze.
From: NANOG [mailto:nanog-bounces at nanog.org] On Behalf Of Eliezer Croitoru
Sent: Thursday, November 13, 2014 8:10 PM
To: nanog at nanog.org
Subject: Linux router traffic monitoring, how? netflow?
-----BEGIN PGP SIGNED MESSAGE-----
I have a tiny linux router based on ubuntu and sometimes I get a massive load of UDP traffic because of one of the PCs in the network.
Usually I handle the situation with a strict block using iptables.
The main issue is to find it due to the load.
For now I am monitoring the traffic load using MRTG but it won't notify me.
I can try to use nagios to monitor traffic load for a period of time but before I start working on it I want another person opinion and options.
I have seen netflow in the past but never actually used it.
Thanks in advance,
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
-----END PGP SIGNATURE-----
More information about the NANOG