{"id":39,"date":"2004-08-10T14:07:18","date_gmt":"2004-08-10T11:07:18","guid":{"rendered":"http:\/\/void.gr\/kargig\/blog\/?p=39"},"modified":"2007-05-11T03:28:55","modified_gmt":"2007-05-11T00:28:55","slug":"simple-port-accounting","status":"publish","type":"post","link":"https:\/\/www.void.gr\/kargig\/blog\/2004\/08\/10\/simple-port-accounting\/","title":{"rendered":"Simple Port Accounting"},"content":{"rendered":"

Say you’ve got a server with various services running on multiple ports and you want to monitor how much traffic each port recieves or sends. I’ve written 2 small scripts to easily accomplish this task.
\nThe whole process is based on iptables<\/a> rules & MRTG <\/a>. You have to make some rules first on iptables according to what you want to monitor.
\nAs an example we will monitor web-server traffic on port 80 (HTTP) and port 443 (HTTPS).
\nFirst come the iptables rules.
\niptables.sh<\/p>\n


\n#!\/bin\/bash
\nME=\"XXX.YYY.ZZZ.WWW\"
\nIPTABLES=\/usr\/sbin\/iptables
\n$IPTABLES -A INPUT -p tcp -d $ME --dport 80
\n$IPTABLES -A INPUT -p tcp -d $ME --dport 443
\n$IPTABLES -I INPUT -i eth0
\n$IPTABLES -A OUTPUT -p tcp -s $ME --sport 80
\n$IPTABLES -A OUTPUT -p tcp -s $ME --sport 443
\n$IPTABLES -I OUTPUT -o eth0
\n<\/code><\/p><\/blockquote>\n

change the ME variable and add your ip inside the quotes. Then put this script someplace where you put scripts…I use \/opt\/scripts or \/root\/scripts, and make an entry to your rc.local (or any other script runs on boot time) to run this script on boot (I hope I won’t get any comments on how to do that…)
\nThen comes the scripts that will take the stats gathered in iptables rules (you can see them by typing iptables -nvxL).
\nFirst script is: port.sh<\/p>\n


\n#!\/bin\/bash
\nHOSTNAME=\"\/bin\/hostname\"
\nIPTABLES=\"\/usr\/sbin\/iptables\"
\nUPTIME=\"\/usr\/bin\/uptime\"
\n$IPTABLES -nvxL | grep -w $1 | awk '{ print $2 }'
\n$UPTIME | awk '{ print $3, $4, $5 }'
\n$HOSTNAME
\n<\/code><\/p><\/blockquote>\n

Second script is: inout.sh<\/p>\n


\n#!\/bin\/bash
\nHOSTNAME=\"\/bin\/hostname\"
\nIPTABLES=\"\/usr\/sbin\/iptables\"
\nUPTIME=\"\/usr\/bin\/uptime\"
\nif [ \"$1\" == \"packet\" ]; then
\n$IPTABLES -nvxL | grep -w eth0 | awk '{ print $1 }'
\nelse
\n$IPTABLES -nvxL | grep -w eth0 | awk '{ print $2}'
\nfi
\n$UPTIME | awk '{ print $3, $4, $5 }'
\n$HOSTNAME
\n<\/code><\/p><\/blockquote>\n

You can give them a try by typing .\/port.sh 80:<\/p>\n


\n1963705
\n19120562
\n58 days, 22:07,
\n<\/code><\/p><\/blockquote>\n

or .\/inout.sh<\/p>\n


\n29086377134
\n70585824723
\n58 days, 22:16,<\/code><\/p><\/blockquote>\n

or even: .\/inout.sh packet<\/p>\n


\n514425312
\n549647125
\n58 days, 22:17,
\n<\/code><\/p><\/blockquote>\n

The inout script can take the word “packet” as a command line parameter to show you total packet information.<\/p>\n

What you need to do next is configure your mrtg to read these stats.
\nmrtg.cfg<\/p>\n


\nWorkDir: \/foo\/bar\/change\/me
\nTarget[80]: `\/opt\/scripts\/port.sh 80`
\nMaxBytes[80]: 200000
\nTitle[80]: Port 80
\nPageTop[80]: <h1>Port 80 Stats<\/h1><\/p>\n

Target[443]: `\/opt\/scripts\/port.sh 443`
\nMaxBytes[443]: 200000
\nTitle[443]: Port 443
\nPageTop[443]: <h1>Port 443 Stats<\/h1><\/p>\n

Target[inout]: `\/opt\/scripts\/inout.sh`
\nMaxBytes[inout]: 2000000
\nTitle[inout]: Total Traffic
\nPageTop[inout]: <h1>Total Traffic Stats<\/h1><\/p>\n

Target[inoutp]: `\/opt\/scripts\/inout.sh packet`
\nMaxBytes[inoutp]: 2000000
\nTitle[inoutp]: Total Packets
\nPageTop[inoutp]: <h1>Total Packet Stats<\/h1>
\n<\/code><\/p><\/blockquote>\n

Where workdir is a directory inside your web server served documents. For example…if your DocumentRoot is \/var\/www\/mydomain\/ make Workdir: \/var\/www\/mydomain\/mrtgstats
\nNow fire up mrtg to read the specified .cfg file and you are done!
\n# \/foo\/bar\/mrtg\/install\/dir\/mrtg \/cfg\/file\/dir\/mrtg.cfg<\/p>\n

and you will see some files being created inside “WorkDir: \/foo\/bar\/change\/me”.
\nAdd this line to your crontab
\n*\/5 * * * * \/foo\/bar\/mrtg\/install\/dir\/mrtg \/cfg\/file\/dir\/mrtg.cfg
\nAnd you will have automated results every five minutes.<\/p>\n

If you want to create a nice index.html to have all stats in one dir just do this:
\n# \/foo\/bar\/mrtg\/install\/dir\/indexmaker –output=\/foo\/bar\/change\/me\/index.html –title=”MY Port Stats” –enumerate –columns=1 \/cfg\/file\/dir\/mrtg.cfg<\/p>\n

Now go to http:\/\/yourhost\/foo\/bar\/change\/me and enjoy<\/p>\n","protected":false},"excerpt":{"rendered":"

Say you’ve got a server with various services running on multiple ports and you want to monitor how much traffic each port recieves or sends. I’ve written 2 small scripts to easily accomplish this task. The whole process is based on iptables rules & MRTG . You have to make some rules first on iptables […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ep_exclude_from_search":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-39","post","type-post","status-publish","format-standard","hentry","category-general"],"aioseo_notices":[],"views":8485,"_links":{"self":[{"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/posts\/39","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/comments?post=39"}],"version-history":[{"count":0,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/posts\/39\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/media?parent=39"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/categories?post=39"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/tags?post=39"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}