One of the best tools I've found for monitoring network traffic is ntop
It will give you totals, plus protocol breakdowns for each packet it
sniffs. If you've got a copy of a newish SuSE, it's in the distribution.
Ok, it possibly means having a separate machine for monitoring, and
either a managed switch that can mirror all traffic to one port onto
another port (the ntop machine needs to see all traffic that flows
through m0n0) or a hub (NOT switch) with the network/m0n0wall/monitoring
machine on it only. Eg:
M0n0----hub--------to rest of network
There's an ntop add-in for Smoothwall if you look through their forums.
If you want some screenshots of ntop in action, let me know.
From: Martin Cavanagh [mailto:mac24nz at yahoo dot com dot au]
Sent: Wednesday, December 01, 2004 11:13 PM
To: m0n0wall at lists dot m0n0 dot ch
Subject: Traffic Measurement
But i would also like to be able to see, who uses the data cap and how
much they use
The information in this e-mail and any files transmitted with it is confidential
and may be legally privileged. It is intended solely for the addressee and
others authorised to receive it. If you are not the intended recipient, any
disclosure, copying, distribution or action taken in reliance on its contents
is prohibited and may be unlawful.
The opinions expressed in this message are that of the sender and not
necessarily those of Aaland Limited. If you have received this e-mail in
error please notify postmaster at aaland dot co dot uk