Burnout
Tux's lil' helper
Joined: 24 Jun 2004
Posts: 77
|
 Posted: Thu Apr 21, 2005 9:12 am Post subject: ipac-ng rules |
 |
|
Hello, I 've already tryed many tools for measuring traffic especially on special ports and so on. Now I am testing ipac-ng and it seems to be a very good tool.
The rules manual:
| Code: | # Example config file with accounting rules for iptables
# Install as /etc/ipac-ng/rules.conf
#
# Format:
# Name of rule|direction|interface|protocol|source|destination|extension|
# WARNING!!!! spaces are not allowed before and after '|'.
#
# where
# Name of rule Any string to identify this rule
# direction ipac~fi - forward in
# ipac~fo - forward out
# ipac~i - outgoing from machine with ipac-ng to other host(/net)
# (or incoming to otherhost)
# ipac~o - incoming to machine with ipac-ng
# (or outgoing from otherhost)
#
# interface interface name, '+' means all interfaces (dont try to use ip numbers here!)
# protocol tcp | udp | icmp | all
# source \
# destination both as described in ipfwadm(8), or empty
#
#
# W A R N I N G ! ! !
#
# Don't use symbols other than '0-9A-z[space]' in rules names. You may encounter
# some strange troubles.
|
I have a problem for making soms rules measuring http traffic.
| Code: | Incoming HTTP|ipac~o|eth0|tcp|0/0|0/0 http https 81:83 8080 squid||
Outgoing HTTP|ipac~i|eth0|tcp|0/0 http https 81:83 8080 squid|0/0|| |
Are that good rules for measuring http traffic, or not?  |
|
Networking & Security
