EnderUNIX Team.


EnderUNIX İpucu

Arkadaşıma gönder , Ana Sayfa

[ Ipfilter ]

"Ipfilter'da bazı önemli istatistiksel komutlar" - Murat Balaban - (2003-12-09 05:17:17)   [3648]

State tablosu istatistikleri
istanbul~# ipfstat -s
IP states added:
788510 TCP
67251 UDP
30 ICMP
512467407 hits
17190058 misses
2 maximum
0 no memory
322 bkts in use
323 active
67281 expired
788187 closed
istanbul~#

Bütün kuralların hit sayıları
istanbul~# ipfstat -hio
122152 block out quick on xl0 from any to any head 2
106642 pass out quick proto tcp from any to any flags S/FSRPAU keep state group 2
10327 pass out quick proto udp from any to any keep state group 2
4575 pass out quick proto icmp from any to any keep state group 2
...
...


En çok bant genişliği yiyen bağlantılar
# ipfstat -t
Source IP Destination IP ST PR #pkts #bytes ttl
193.140.143.23,4427 216.136.204.118,5999 4/4 tcp 2195465 1907367777 119:59:59
81.215.192.93,2514 193.140.143.24,53660 0/5 tcp 6194 5722308 0:22
81.215.192.93,3365 193.140.143.24,53663 4/4 tcp 4223 3870204 119:59:59

Gerçek zamanlı state tablosu hareketleri:
istanbul~# ipmon -o S
22/11/2003 18:38:20.081208 STATE:NEW 193.140.143.23,1024 -> 193.140.1.1,53 PR udp
22/11/2003 18:38:25.085731 STATE:NEW 193.140.143.23,1025 -> 193.140.143.2,53 PR udp
22/11/2003 18:38:30.095676 STATE:NEW 193.140.143.23,1026 -> 193.140.143.3,53 PR udp
22/11/2003 18:38:35.105731 STATE:NEW 193.140.143.23,1027 -> 193.140.1.1,53 PR udp
22/11/2003 18:38:38.115748 STATE:NEW 193.140.143.23,1028 -> 193.140.143.2,53 PR udp
22/11/2003 18:38:41.125796 STATE:NEW 193.140.143.23,1029 -> 193.140.143.3,53 PR udp
22/11/2003 18:38:44.135812 STATE:NEW 193.140.143.23,1030 -> 193.140.1.1,53 PR udp


Gerçek zamanlı NAT tablosu hareketleri:
istanbul~# ipmon -o N



Arkadaşıma gönder , Ana Sayfa