traffic accounting per ip

From:	Roberto Pereyra <rjpereyra at gualeguaychu dot gov dot ar>
To:	m0n0wall at lists dot m0n0 dot ch
Cc:	sysnetgchu at yahoo dot com
Subject:	traffic accounting per ip
Date:	Wed, 10 Mar 2004 20:33:28 -0300

Hi all !

I want to have the traffic accounting per IP in my m0n0wall.

I use http://firewall/status.php

and read the "ipfw show" output.

00100     7948      624472 allow ip from 10.1.0.2 to any
00200    10910     1272334 allow ip from any to 10.1.0.2
00300      325       18354 pipe 1 ip from 10.1.1.30 to any via rl1
00400      452      444960 pipe 2 ip from any to 10.1.1.30 via rl1
00500        1         229 pipe 3 ip from 10.1.1.31 to any via rl1
00600        0           0 pipe 4 ip from any to 10.1.1.31 via rl1
00700       39        2814 pipe 5 ip from 10.1.1.32 to any via rl1
00800        0           0 pipe 6 ip from any to 10.1.1.32 via rl1
00900        1         244 pipe 7 ip from 10.1.1.33 to any via rl1
01000        0           0 pipe 8 ip from any to 10.1.1.33 via rl1
.....
65535 29283699 12971416387 allow ip from any to any

I read the third column like the user's traffic per IP.

Is this right ?

M0n0wall reset the "ipfw show" output only when I reboot the firewall
or  at another moment ?

If I have the firewall run one month then I have with this output the monthly traffic ?


Thanks in advance

roberto