LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 06-02-2014, 07:42 AM   #1
gosssamer
Member
 
Registered: Dec 2010
Posts: 59

Rep: Reputation: 0
Creating iptraf-ng traffic filters


Hi,

Is anyone using iptraf-ng and can show me an example filter? The examples and documentation for iptraf don't directly correlate to iptraf-ng, and I can't get filters to work with iptraf-ng.

I'm trying to create a simple filter that monitors incoming ssh traffic.

I've experimented quite a bit, but it seems once I create any type of filter, the packet views always shows zero or very low values that are completely wrong.

Any ideas greatly appreciated.
 
Old 06-04-2014, 09:18 PM   #2
dijetlo
Senior Member
 
Registered: Jan 2009
Location: RHELtopia....
Distribution: Solaris 11.2/Slackware/RHEL/
Posts: 1,491
Blog Entries: 2

Rep: Reputation: Disabled
Quote:
Is anyone using iptraf-ng and can show me an example filter?
I don't think it does what you think it does.....
Code:
root@kahuna:/home/willie# iptraf-ng --help
usage: iptraf-ng [options]
   or: iptraf-ng [options] -B [-i <iface> | -d <iface> | -s <iface> | -z <iface> | -l <iface> | -g]

    -h, --help            show this help message

    -i <iface>            start the IP traffic monitor (use '-i all' for all interfaces)
    -d <iface>            start the detailed statistics facility on an interface
    -s <iface>            start the TCP and UDP monitor on an interface
    -z <iface>            shows the packet size counts on an interface
    -l <iface>            start the LAN station monitor (use '-l all' for all LAN interfaces)
    -g                    start the general interface statistics

    -B                    run in background (use only with one of the above parameters
    -f                    clear all locks and counters
    -t <n>                run only for the specified <n> number of minutes
    -L <logfile>          specifies an alternate log file

Last edited by dijetlo; 06-04-2014 at 09:31 PM.
 
Old 06-04-2014, 09:21 PM   #3
gosssamer
Member
 
Registered: Dec 2010
Posts: 59

Original Poster
Rep: Reputation: 0
Quote:
Originally Posted by dijetlo View Post
I don't it does what you think it does.....
Code:
root@kahuna:/home/willie# iptraf-ng --help
usage: iptraf-ng [options]
   or: iptraf-ng [options] -B [-i <iface> | -d <iface> | -s <iface> | -z <iface> | -l <iface> | -g]

    -h, --help            show this help message

    -i <iface>            start the IP traffic monitor (use '-i all' for all interfaces)
    -d <iface>            start the detailed statistics facility on an interface
    -s <iface>            start the TCP and UDP monitor on an interface
    -z <iface>            shows the packet size counts on an interface
    -l <iface>            start the LAN station monitor (use '-l all' for all LAN interfaces)
    -g                    start the general interface statistics

    -B                    run in background (use only with one of the above parameters
    -f                    clear all locks and counters
    -t <n>                run only for the specified <n> number of minutes
    -L <logfile>          specifies an alternate log file
The curses interface has an option for building ip/port filters. Its usage is unclear, and the documentation is non-existent. The original iptraf docs differ to much to be useful.
 
  


Reply

Tags
monitoring, ssh, traffic


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Creating filters in rsyslog ahmedfai Red Hat 1 01-19-2013 01:48 PM
Creating filters in rsyslog 5 ahmedfai Linux - Newbie 1 01-19-2013 08:29 AM
traffic log with iptraf argentux Linux - Networking 4 12-09-2011 11:00 AM
Slow internet connection iptraf shows a lot of UDP port 53 (Domain) traffic bucovaina78 Linux - Networking 3 12-22-2009 01:53 PM
LXer: IPTraf - Console based IP Traffic Monitor in openSUSE LXer Syndicated Linux News 0 03-03-2009 07:20 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 02:47 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration