Hi

I have a Linux host connected via LAN to Internet. No proxy or squid is used on the host and outgoing traffic to Internet is not limited.

I have several local users on this box.

Recently bandwidth statistics on the switch/router showed increase in the Internet traffic from this host.

How do I monitor the traffic utilization per local user on Linux host? I want to be able to monitor the amount of traffic per port and per user, like user alice downloaded 20GB today via port 22, and so on.

Do not offer to use Squid, this is not just web traffic I want to monirot but all amount of incoming/outgoing traffic per user per port.

I believe you would probably have to write a custom application for this, although iptables does support specifying a specific user so that might be of use also.

There are a lot of tools but most work on a host by host basis not by user at host basis.

http://www.ubuntugeek.com/bandwidth-...for-linux.html

I’ve actually needed this a few times, but never found a good solution. I had a look around and found LINUBIA:
http://www.csg.uzh.ch/publications/software/linubia

There is a LINUBIA publication (that isn’t freely available):
http://www.springerlink.com/content/j883595680m85t1x/

It’s interestingly saying that:
I’ve not found much on how it’s been implemented, the API or any user space application that uses it. The first link has a link to a LINUBIA patch for kernel 2.6.17.

My Googling must be bad, as I would have expected there to be loads of user based IP accounting available for Linux. Very odd.

I just spotted the slides from Manuel Feier's presentation:
http://www.netsteps.ch/ipaccounting/...esentation.pdf