ipfw Traffic statistic by countries, TLD and sites

[Ganbold]

At 02:18 PM 12/28/2004, you wrote:
>On Tue, Dec 28, 2004 at 12:06:03PM +0800, Ganbold wrote:
> > Hi,
> >
> > I'm using ipfw in bridged mode on FreebSD 5.3
> >
> > FreeBSD fw.ub.mng.net 5.3-STABLE FreeBSD 5.3-STABLE #10: Fri Nov 19
> > 09:18:17 ULAT 2004     tsgan at fw.ub.mng.net:/usr/obj/usr/src/sys/FW  i386
> >
> > I would like to collect statistics from traffic, which passing through
> > ipfw, and make report which should include usage statistics by
> > countries, TLD, sites etc.
>
>Hmm, ntop has some cute 'views' of your network traffic; it's in
>port - go see if that's of any help...

ntop seems like eats RAM more. So I'm thinking to use p0f with GeoIP API 
and mysql to
save IPs into mysql DB and then will make some post processing.
Actually I already integrated p0f with GeoIP so there is left post 
processing part only.

thanks,

Ganbold


> > thanks in advance,
> >
> > Ganbold
>
>--
>Brian Reichert                          <reichert at numachi.com>
>37 Crystal Ave. #303                    Daytime number: (603) 434-6842
>Derry NH 03038-1713 USA                 BSD admin/developer at large