how many bytes transferred through sshd by user

secretlydead · 08-27-2009, 08:26 AM

I have a debian box set up as a SOCKS tunnel, using ssh as the server.

Is there a way to log how many bytes are transferred by user? (The user first connect through ssh like 'ssh -ND port user@proxy.id', and then configures firefox/etc for SOCKS proxy localhost port.)

ShellPwn · 08-27-2009, 08:33 AM

you could try using snort.

snort -l /var/log/snort dst host your_remote_server dst port 22

you could then count the amount of bytes or something like that, or make an estimate per each packet.