From netramet-owner Thu May 2 22:28:44 1996 Received: (from majordom@localhost) by mailhost.auckland.ac.nz (8.7.3/8.7.3-ua) id WAA04468 for netramet-outgoing; Thu, 2 May 1996 22:24:41 +1200 (NZST) Received: from oxmail3.ox.ac.uk (oxmail3.ox.ac.uk [163.1.2.9]) by mailhost.auckland.ac.nz (8.7.3/8.7.3-ua) with SMTP id WAA04381 for ; Thu, 2 May 1996 22:20:47 +1200 (NZST) Received: from sable.ox.ac.uk by oxmail3 with SMTP (PP) with ESMTP; Thu, 2 May 1996 11:17:20 +0100 Received: (from jeremy@localhost) by sable.ox.ac.uk (1.6/8.6.12) id LAA03869; Thu, 2 May 1996 11:17:12 +0100 Date: Thu, 2 May 1996 11:17:12 +0100 (BST) From: Jeremy Martin To: netramet@auckland.ac.nz Subject: Problem installing NeTraMet Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: netramet-owner@auckland.ac.nz Precedence: bulk I've had a bit of trouble installing NeTraMet on a system here in Oxford. I wish to use the software initially just to monitor the traffic content on our backbone, and I plan to use a single device as both monitor and meter. Having installed the software I attempted to start it up as follows: #/bin/sh MIBTXT=/usr/local/src/mib.txt export MIBTXT /usr/local/bin/NeTraMet -w private & /usr/local/bin/NeMaC -r /usr/local/src/rules.sample 163.1.2.3 private I encounted a problem in that the computer I am using is already running an SNMP server on UDP port 161. So I recompiled all the software having first modified the include file snmp.h as follows: #define SNMP_PORT 167 #define SNMP_TRAP_PORT 166 I hoped that changing this parameter would allow the software to function as normal. But this is what happened: NeTraMet: Network Traffic Meter V3.3 Running on netman, interface le0 NeMaC: NeTraMet Manager & Controller V3.3 Using MIB file: /usr/local/src/mib.txt Couldn't get meter info from 163.1.2.3! Does community private have read or write access to the meter? Any help would be much appreciated. Jeremy Martin From netramet-owner Fri May 3 03:41:11 1996 Received: (from majordom@localhost) by mailhost.auckland.ac.nz (8.7.3/8.7.3-ua) id DAA12123 for netramet-outgoing; Fri, 3 May 1996 03:40:45 +1200 (NZST) Received: from dcs.shef.ac.uk (gw.dcs.shef.ac.uk [143.167.8.2]) by mailhost.auckland.ac.nz (8.7.3/8.7.3-ua) with SMTP id DAA12116 for ; Fri, 3 May 1996 03:40:40 +1200 (NZST) Received: from tiger.dcs.shef.ac.uk by dcs.shef.ac.uk (4.1/DAVE-1.0) id AA21550; Thu, 2 May 96 16:39:51 BST Received: from tiger (localhost) by tiger.dcs.shef.ac.uk (4.1/SMI-4.1) id AA19738; Thu, 2 May 96 16:39:45 BST Message-Id: <3188D740.41C67EA6@dcs.shef.ac.uk> Date: Thu, 02 May 1996 16:39:44 +0100 From: Cheryl Basso X-Mailer: Mozilla 2.0 (X11; I; SunOS 4.1.4 sun4m) Mime-Version: 1.0 To: netramet@auckland.ac.nz Cc: S.Cvetkovic@dcs.shef.ac.uk Subject: Netramet Details: HOW TO? X-Url: http://magellan.mckinley.com/rr.cgi?38290 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: netramet-owner@auckland.ac.nz Precedence: bulk Netramet looks quite interesting. Can it do PDU analysis? etc. Please send me details of the software and how to acquire it. Many thanks. Cheryl From netramet-owner Fri May 10 12:10:04 1996 Received: (from majordom@localhost) by mailhost.auckland.ac.nz (8.7.3/8.7.3-ua) id MAA15612 for netramet-outgoing; Fri, 10 May 1996 12:06:42 +1200 (NZST) Received: from online.tmx.com.au (online.tmx.com.au [192.150.129.1]) by mailhost.auckland.ac.nz (8.7.3/8.7.3-ua) with SMTP id MAA15602 for ; Fri, 10 May 1996 12:06:37 +1200 (NZST) Received: from bha.oz.au (daemon@localhost) by online.tmx.com.au (8.6.5/8.6.5) with MHSnet id KAA17418 for netramet@auckland.ac.nz; Fri, 10 May 1996 10:06:23 +1000 Received: from owl by wurrup (AIX 3.2/UCB 5.64/4.03) id AA44338; Fri, 10 May 1996 10:02:24 +1000 Date: Fri, 10 May 1996 10:02:24 +1000 Message-Id: <9605100002.AA44338@wurrup> X-Sender: mrm@rabbit X-Mailer: Windows Eudora Light Version 1.5.2 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" To: netramet@auckland.ac.nz From: Mark Myatt Subject: NeTraMet on LINUX Sender: netramet-owner@auckland.ac.nz Precedence: bulk Hello, I have been having troubles getting NeTraMet built to run on LINUX as I cannot setup libpcap. I downloaded libpcap.0.0.6 from the internet and ran the configuration script. However, it failed with a message indicating it could not find an appropriate traffic collection library. Does anyone know what library I need to install on LINUX to get libpcap made? Thanks, Mark Myatt. --------------------------------------------------------------------------- Mark Myatt 59-69 Shafston Ave Phone: +61-7-3258-4531 Systems Engineer Kangaroo Point Qld 4169 Fax: +61-7-3258-4557 BHA Computer Pty Ltd Australia E-mail: mrm@bha.oz.au --------------------------------------------------------------------------- From netramet-owner Fri May 10 20:19:17 1996 Received: (from majordom@localhost) by mailhost.auckland.ac.nz (8.7.3/8.7.3-ua) id UAA16046 for netramet-outgoing; Fri, 10 May 1996 20:18:34 +1200 (NZST) Received: from s3.asi.fr (nuntz@s3.asi.fr [194.183.193.12]) by mailhost.auckland.ac.nz (8.7.3/8.7.3-ua) with SMTP id UAA16033 for ; Fri, 10 May 1996 20:18:26 +1200 (NZST) Received: (from nuntz@localhost) by s3.asi.fr (8.6.12/8.6.9) id JAA09962; Fri, 10 May 1996 09:17:48 +0200 Date: Fri, 10 May 1996 09:17:47 +0200 (MET DST) From: Nicolas UNTZ To: Mark Myatt cc: netramet@auckland.ac.nz Subject: Re: NeTraMet on LINUX In-Reply-To: <9605100002.AA44338@wurrup> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: netramet-owner@auckland.ac.nz Precedence: bulk On Fri, 10 May 1996, Mark Myatt wrote: > Hello, > > I have been having troubles getting NeTraMet built to run on LINUX as I > cannot setup libpcap. I downloaded libpcap.0.0.6 from the internet > and ran the configuration script. However, it failed with a message > indicating it could not find an appropriate traffic collection library. > Does anyone know what library I need to install on LINUX to get libpcap > made? > > Thanks, > > Mark Myatt. You can find a Linux version of the libpcap library in the Linux port of Tcpdump by Richard Kooijman (tcpdump-richard-1.7.tar.gz). It may be an older version though, but porting the newest version shouldn't be too hard with it. I also found the NeTraMet binaries for Linux somewhere (the package was called Linux.tar.gz. If you can't get these files, just send me a mail. Regards, -- Nicolas Untz / Acces & Solutions Internet / nuntz@asi.fr From netramet-owner Sat May 25 01:14:44 1996 Received: (from majordom@localhost) by mailhost.auckland.ac.nz (8.7.3/8.7.3-ua) id BAA01715 for netramet-outgoing; Sat, 25 May 1996 01:10:45 +1200 (NZST) Received: from itata.disca.utfsm.cl (itata.disca.utfsm.cl [200.1.21.35]) by mailhost.auckland.ac.nz (8.7.3/8.7.3-ua) with ESMTP id BAA01707 for ; Sat, 25 May 1996 01:10:38 +1200 (NZST) Received: (from maraboli@localhost) by itata.disca.utfsm.cl (8.7.5/8.7.3) id JAA20115 for netramet@auckland.ac.nz; Fri, 24 May 1996 09:13:43 -0400 (CST) From: Marcelo Maraboli Message-Id: <199605241313.JAA20115@itata.disca.utfsm.cl> Subject: user traffic accounting..possible? To: netramet@auckland.ac.nz Date: Fri, 24 May 1996 09:13:42 -0400 (CST) X-Mailer: ELM [version 2.4 PL25] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: netramet-owner@auckland.ac.nz Precedence: bulk hello admins.. I am not subscribed to this list, but I recently downloaded NeTraMet 3.3 with the hope it could satisfy what I'm looking for.. ...which is to log (just the amount of bytes) the Network traffic a user in my Solaris 2.5 system makes. We have so many users and I hate that we have to restrict use of internet due to a few users who only know how to use the "ftp" command. :) Can NeTraMet log these events? ....and a script generate a report like.. user1 23456 bytes 24-5-96 user2 600344 bytes 23-5-96 ... Does anyone know of a software that does?? I'd appreciate ANY help that you can give me... Thanks.. PD: email me at the address below.. -- Marcelo Maraboli R. | |----| |-[]-| |----| C: uCapacitor | | C I C | I: Electronic Undergraduate Student | | | Island Electronic Engineering | |--------()--------| V: Voltage Federico Santa Maria University | V + - Chile | "Quantum Electronics" | The Beginning of the New Electronic Age System Operator of disca.utfsm.cl | email:maraboli@disca.utfsm.cl | "Quantum Electronics, That's COOL!" WWW : http://www.disca.utfsm.cl | "Shut up, Beavis!" --------------------------------------------------------------------------/ From netramet-owner Mon May 27 17:15:27 1996 Received: (from majordom@localhost) by mailhost.auckland.ac.nz (8.7.3/8.7.3-ua) id RAA16453 for netramet-outgoing; Mon, 27 May 1996 17:12:27 +1200 (NZST) Received: from nmdx01.ncom.nt.gov.au ([150.191.80.2]) by mailhost.auckland.ac.nz (8.7.3/8.7.3-ua) with ESMTP id RAA16417 for ; Mon, 27 May 1996 17:11:58 +1200 (NZST) From: Clive.Mackrow@dwnplaza.ncom.nt.gov.au Received: from LMS.NCOM.NT.GOV.AU by aarnet.ncom.nt.gov.au (PMDF V5.0-4 #4927) id <01I57CLGS38W0056GD@aarnet.ncom.nt.gov.au>; Mon, 27 May 1996 14:36:57 CST+930 Date: Mon, 27 May 1996 14:38:30 +0930 Subject: Re: user traffic accounting..possible? To: " - (052)netramet(a)auckland.ac.nz" , " - (052)maraboli(a)disca.utfsm.cl" , " - (052)Griffith, Linda" Message-id: <0050000001353683000002*@MHS.ncom.nt.gov.au> Content-transfer-encoding: 7BIT X400-Content-type: P2-1988 (22) X400-MTS-identifier: [/PRMD=NTTGOV/ADMD=TELEMEMO/C=AU/;0050000001353683000002] X400-Originator: Clive.Mackrow@DWNPLAZA.NCOM.nt.gov.au X400-Recipients: non-disclosure:; Sender: netramet-owner@auckland.ac.nz Precedence: bulk Marcelo Here in Darwin in the North of Australia we have taken the following approach. The Internet traffic is collected in 10 minute time slots, and then downloaded to the mainframe (TSO flat file) daily. This means that an individual workstation could have many records within one time slot. We use SAS to read the flat file, summarise traffic on a workstation/time basis, and load it to our account generation package,BDBF (this product is no longer available), from which we produce the monthly bills for each workstation. Thus we hold records as follows: user1 123456 bytes 00:10 24/5/96 user2 56789 bytes 00:10 24/5/96 user1 12222 bytes 00:20 24/5/96 etc We have chosen to consolidate all traffic for each IP address and present our Departmental Client with an invoice at the end of each month. We have allocated blocks of addresses to each agency to streamline the process, so, for instance in my own case W/station address xxx, my boss gets an invoice for me for the month of April which might look like this Site Work Bytes Bytes ADDRESS Stn From Internet To Internet $ Cost 150.191.208.xxx 18,163,975 2,388,114 44.50 150.191.208.yyy 14,558,124 2,013,785 35.67 Total $80.17 My colleague at W/station yyy records a different amount, all employees within a work group are listed together so that the Business Manager gets a summarised bill for the time period, in this case one month, all business units are the summarised again so that the CEO sees the total for the whole organisation. As each IP address is allocated to a person then should the need arise we can very easily analyse in detail what that person was doing and if neccessary where that person went. This has a parrallel in the world of the telephone in that provided your phone bill in the department falls within acceptable 'norms' then the bill just gets paid. If on the other hand the bill falls outside those 'norms' then a manager will ask the user for a 'please explain'. Hope this is of some use, I am sure there are other approaches that work, this one works for us. Regards Clive +--------------------------------------------------------------------+ | The view expressed here is my own, and not that of my Employer | +--------------------------------------------------------------------+ |Clive Mackrow | |Internet Services Manager | |NCOM Services | |Department of Transport and Works | |GPO Box 4000 | |DARWIN NT 0801 | |Phone: +61 8 8999 6314 | |Fax +61 8 8999 6790 | |EMail clive.mackrow@nt.gov.au | |URL:http://www.nt.gov.au/ | +--------------------------------------------------------------------+ ______________________________ Reply Separator _________________________________ Subject: user traffic accounting..possible? Author: netramet-owner@mailhost.auckland.ac.nz at SMTP Date: 24/5/96 11:34 PM hello admins.. I am not subscribed to this list, but I recently downloaded NeTraMet 3.3 with the hope it could satisfy what I'm looking for.. ...which is to log (just the amount of bytes) the Network traffic a user in my Solaris 2.5 system makes. We have so many users and I hate that we have to restrict use of internet due to a few users who only know how to use the "ftp" command. :) Can NeTraMet log these events? ....and a script generate a report like.. user1 23456 bytes 24-5-96 user2 600344 bytes 23-5-96 ... Does anyone know of a software that does?? I'd appreciate ANY help that you can give me... Thanks.. PD: email me at the address below.. -- Marcelo Maraboli R. | |----| |-[]-| |----| C: uCapacitor | | C I C | I: Electronic Undergraduate Student | | | Island Electronic Engineering | |--------()--------| V: Voltage Federico Santa Maria University | V + - Chile | "Quantum Electronics" | The Beginning of the New Electronic Age System Operator of disca.utfsm.cl | email: | "Quantum Electronics, That's COOL!" WWW : http://www.disca.utfsm.cl | "Shut up, Beavis!" --------------------------------------------------------------------------/