This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Monitoring - Best Practices

Hi,
how is possible to identify the source of peak network usage?

Lets assume your ASG has multiple tasks liky proxy, vpn, mail and other stuff.

Just an example on the external interface:
looking into ASG network usage graphs, you might see a permanent, average network stream between 30-50 Mbps. Sometimes there are peaks with 150 Mbps (10 minutes).

It is now possible to determin the exact date and throughput. You might also be able to find the amount of data of a specific client below the accounting tab.
But, I' nearly blind to see who causes the peaks in the network usage.

http.log, ipsec.log, packetfilter.log does not really help
iftop does only help in real time when your recognize the peaks.

Any tipps?
Thanks
Stefan

This thread was automatically locked due to age.

0 BarryG over 14 years ago

I would think the http content filter log would include the Bytes Transferred for each connection.

If not, your best choice might be to setup a netflow type system; there is lots of free software available.

IMHO, Astaro should provide more direct access to the accounting database, with an SQL interface if nothing else.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 ciscoman over 14 years ago

Hi,
http content filter is fine when the box only acts as proxy. Having IPSec and VPN and other NAT stuff on the same device, you might run in trouble.

netflow might be an option. According to the URL below, I was under the impression that this does not work until now.
add netflow aggregation/network monitoring to Astaro

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 14 years ago

Yeah, I don't think Astaro has netflow, but I'm saying there's lots of ways to set it up if you have some spare hardware and a SPAN port.

Barry
Cancel
Vote Up 0 Vote Down

Cancel