I have installed conky from soft manager after knowing its power today. I'm using 10.10. I want to design a conky script which monitor the network traffic ie total upload + download on monthly basis as I'm on limited internet plan which is too common here. I have free usage from 2am to 8am in the morning and want to exclude this traffic. So I'm in search of a custom script which can accomplish this.
I have an Ubuntu server box with multiple NICs. I'd like to specify that all traffic bound for a certain IP range goes through one NIC, and everything else goes through the other. Does anyone know how to do that? I'm not a total newbie, but I'm also not a linux guru (but usually can google my way to a solution...usually).
ETA: Source and destination IP for routing.We have 1 NIC with a public IP, all public IP's should talk to it.Another NIC with a private IP, all private traffic should talk to this.In practice, I have some devices on a different subnet of the public IP range we have that will only talk to the private IP.
I want to explicitly commit bandwidth to only 3 VOIP connections, where a connection is defined as a source IP address, destination IP address, and a traffic class. I would like the traffic controller to put the first 3 VOIP connections into 3 different queues that would have equal priorities that are higher than Best Effort. If a 4th VOIP connection were to start, its packets would be put into the Best Effort queue. When one of the VOIP connections ends, I would like the incoming packets of a VOIP connection that is in the Best Effort queue (assuming there is one) to now start going into the free VOIP queue. Is it possible to do this? Can traffic control keep track of connections being created and deleted like that? If so, how is it done? I would like to avoid having to be constantly updating my filters whenever a connection starts/ends. In actuality, I would want to do this for several different classes.
We have a need to shape outgoing traffic EXCEPT to certain IP/subnets (sounds opposite to the title, but not really :P), using iptables if possible. We've had decent luck doing it with various things, but one of the big problems is the decrease in download speed (which DOES NOT need to be shaped at all) due to upload shaping. ie, we want the shaping not to apply to TCP/UDP overhead. Semi related but probably not important is the ability to shape virtualised systems as well (ie the guests), but as the guest traffic goes through the host any traffic shaping done on/to the host should affect the guests as well.
I have problem with port based routing for local traffic. I can't use trick with iptables -t mangle, ip route table 1, ip rule fwmark table 1 because it works only with forwarded packets. I can't even use patch-o-matic because it's obsolete. And xtables-addons doesn't contain support for "-j ROUTE" yet.
My linux machine is connected to the outside internet, and I have a minecraft server running on an internal machine (192.168.1.201). Right now, I am forwarding port 80 on the linux machine to 192.168.1.30, which is working.
Recently I notice that when I'm connected to an vpn server (pptpd) and I'm using it as a default gateway my download and upload speed decreases almost to the half of the usual speed. I made a test using iptables in order to count how much GRE packets are generated (except the real traffic itself) in that way:
Code: iptables -I INPUT -p gre -j ACCEPT iptables -I OUTPUT -p gre -j ACCEPT
iptables -I FORWARD -s 172.16.10.101 -j ACCEPT iptables -I FORWARD -d 172.16.10.101 -j ACCEPT The first 2 rules match all GRE packets between the pptpd server and client, and the next rules - the traffic between the server and the client.
When I turn the counters to zero and begin to generate traffic (to browse, to download etc.) I see that the GRE packets are even more than these in the FORWARD chain.
So, my question is first of all is my test correct and is it true that so much gre traffic is being generated during the browsing (it becames clear that the traffic is double than if the pptpd wasn't used as a gateway) and if yes - can that traffic be reduced?
I am trying to build conky from SlackBuilds.org using sbopkg, but the build fails every single time. It may be worth noting that I am trying to build with extra options, namely --disable-x11 --disable-xdamage --disable-own-window --disable-xft.
This is so I can have a cli-only conky that I can pipe to my status bar. This has worked in the past, but now the build is failing with a seemingly unrelated error.
It states:
Code:
At the end of the build. I tried removing the option --enable-audacious, but that only resulted in an error which complained that yet another option (--enable-rss=yes) was a "Command not found". This continues as I remove options. I would like to keep many of those options active as I have a need for certain features.
This is a copy of the SlackBuild being used:
Code:
I have a full install of Slackware64 v13.1, so audacious is installed. I don't know what else could be going wrong, and I don't know why this worked in the past.
I have a linux router box with ubuntu which routes internet for several people. There is no extra traffic shaping, so everybody can get the whole bandwidth when its free. What I would like to have is a real time traffic counter per ip, just like a program called "iptraf" but on a per-ip basis. Iptraf can only count on a per-connection basis and thus cannot display a bandwidth that a certain ip has taken (because a single ip can start several onnections). So a console program with text interface like iptraf would be perfect - does anybody know about such a program? After some googling I came to the conclusion that such a program does not exist (which must be wrong - i think that per-ip real time traffic flow information is the first thing every router owner would like to know).
Does anyone maybe know of a client app for Windows/Linux that polls the Linux (Ubuntu) Gateway and checks (in almost real-time) what the bandwidth usage is? Something like KInternet (which is SuSE only as far as I know) where you can see a graph showing how much kbps is sent and received per second.
I wanted to know if i can install mrtg on a client computer in network and measure the network's router traffic.i know that it can be installed on the server.
We have a production web site running apache 2.2.3 across several web servers. we also have a major problem with SPAM comments right now. our method of identifying valid IPs (whether by external clients/customers, or internal personnel) vs SPAM'ers is not ideal - its prone to erroneously labeling legit IP's as targets to be blacklisted.
What we need is.. a way to see how much distinct request traffic is coming from any given IP address to the site in real time (or very near realtime). Essentially we want to see in some graphic/chart way requests per sec to apache / per ip sorted by requests per sec.Would nTop do this? I've only used this in a limited form at a branch office, not on a production web server.
As too my question, at this time I dont control the router/firewall an I would like to block a port thats used for guild wars on my workstation for a while. The reason for blocking is children have abused it an lost it.In this case I am trying to block outgoing traffic on port 6112. I have tried setting up a proxy server on the workstation, but the game seems to ignore it an jump on. Due to the environment, I enabled the workstation SuSEFirewall2 firewall an tried setting up "lo" as a internal an configure the firewall as a router, then disable 0/0 an configured for 0/0,tcp,443 an re route port 80 traffic to proxy.
When I had my own internet, I had a transparent proxy enforcing rules for access times. So setting up a proxy on each machine would not be a bad thing, even if it took some creative thinking. I am trying, but seem to be missing something.Ideally, I would like to setup a transparent proxy, as my kids have learned alot about system administration an know to check the proxy module. If all they have to do is un check "Use Proxy" an by pass a local proxy server, then I am kinda defeated. An applications such as firefox have a proxy setting they could set to none instead of system
This is the error, and line 59 is the second quoted above:
Code: Select all/home/electrolux/bin/ts.sh: line 59: [[: 059: value too great for base (error token is "059")
The script is run every minute, and this error only occurs at 12:59AM, or 00:59.
I presume the problem is either $NOW is being set to 059, or the testing is seeing 0059 as 059. I think the latter, because for the rest of midnight 'til 00:58 the script works. And with some Googling it seems that the leading 0 is making test treat the number as octal... is there a way to tell it it is decimal?
Perhaps this is just some poor time-testing code? Looking at it I don't think it will cope with set time period that crosses midnight..... there's probably just a command to do what I want, isn't there? I know I could have two different scripts cron'd for the different time periods, but it would be much more preferable to be just the one.
I am using KVM and created four guest Operating systems on it. The server host is Ubuntu 10.04.I am using 4 websites in a reverse proxy environment. One of our website is running on CentOS VM. Right now there is no traffic on the website static HTML pages. I do not have any clue as why it was taking longer time to be accessed.
I know several tools that allow tracking time spend on different tasks / projects.Is there any existing tool for very very simplified work-time-tracking.I am an employee, come to the office, switch on my laptop directly. I have mostly around 1 hr lunchtime, but sometimes less, sometimes more.At around 18:00 I want to type one command in the console (or simple GUI would also be okay of course) that tells me:"1 hour overworked. Go home now! (came at 8:00, 1 hour standard lunch-break)."
Looking for console based calendar / time manager (or backend)? Well is there a good one to be known? Maybe else than 'when'? Joe Barr has written a nice intro to the program in his column at linux. [URL]. Is there some backend and frontend that could be used? Or alternatively, could it be possible to have them on an Kerberos/Ldap system or exchange server? What are the best and multiplatform single cal database possibility?
I have conky up and running, but today as I was messing around with the colors for the custom theme, the graphs for cpu temp and network up and down aren't displaying anything.
I am trying to configure my Linux router to restrict Internet access for one computer on my LAN. It needs to be restrictive based on the time of day and the days of the week. I am using the MAC address of the computer to single out the one computer that needs to be blocked. However, this is my first attempt at making any rules with iptables, and I am not sure if I am doing this right. If some one can take a look at this I would greatly appreciate it. This is what I have done so far.
Here is my thinking. Create a new target. Check the MAC address, if it is NOT the offending computer return to the default chain. If it is the offending computer check that we are between the allowed hours and dates and ACCEPT. If we are not within the time/date range then drop the packet.
Code:
Here I am trying to route all packets regardless of the computer on the LAN into the blocked_access chain for checking.
Code:
Is it a good idea to route all traffic through the blocked_access chain? I do run other servers that are accessible from the Internet, so I am not sure how this setup will affect that. I also use shorewall on the router to setup iptables for me. How would I integrate this with shorewall?
I am using squid to block access when he is using the web browser. However, he is still able to play games(World of Warcraft) and the like.
I am using Debian sid, iptable(1.4.6), shorewall(4.4.6), kernel 2.6.32-trunk-686.
Im new to this Cent OS as well as Unix based Operating Systems. Please help me with the below requirement.My Company is a Serach based data collector from different websites like Google, Yahoo & many more..Collecting the data from the search engines is a issue for right now.. As many search engines are blocking us to search and retrive the date after some time.. Taking Google as example : Google Blocks my IP after every 30 mins of retriving.. Application is a Windows based & using Windows 2003 as the Server.. Would like to give a Dynamic IP to the Windows Server via 1st Ethernet Card & enable the 2nd Ethernet for the Internet..Eg : eth 0 = 192.168.1.1eth 1 = x.x.x.x (Public IP)I have check with few of my friends who told me to get Linux or Cent OS installed to do a interface disable after given time & enable a secondary device or virtual interface the next couple of seconds... Like eg : eth 1 = x.x.x.1 eth 2 = x.x.x.2 eth 3 = x.x.x.3 so on.. Would like the eth 1 to be down after 60 mins & eth 2 o be up & again after 60 mins of up time eth 2 down & eth 3 up.
I noticed a huge data transfer to my computer. I wasn't downloading anything big, I have just opened Firefox, Thunderbird etc. It stopped after a minute but I'd like to know, what that was - this wasn't the first time something like this happened. I promptly started Wireshark and captured a few packets, all of them look like this:
[code]...
I tried to look at [URL]... but that webpage does not work. what the traffic might be caused by? Couldn't anyone hacked my pc?
Said that all the config i find put all the info in one place of the screen, in this example on the right side:
url
or like conky colors where you can put in either side, or other complex examples that use folders with images..that at least i need one day to study all the variables it has...
What i want is something simple, in my black background i dont want images and effects, only white simple text.
My problem is: i want for instance my specs above, my log info in the middle, my music info bellow (above my clock) and in conky config i'm hitting my head in the wall....
For instance if i use my facebook script to appear in the midle how the hell can i put my music info bellow without ruined the facebook in the midle...do i need 2 conky configs?
I've got fedora 11 set up to use network time protocol to sync my laptop's date & time when I'm on-line. The question is simple really, I've added a local universality's time server (what is public) and it's live. but it's added to the end of the default time servers what come with fedora. How do I get fedora to just use the local time server, is it a case of removing the default time servers for fedora, but there is a box what says advanced options which are. sync system clock before starting service ???? & use Local time source (( is that the same as the local ntp server that I've got set up ))Hope some body can help me with the network time protocol part of Date/Time settings.