Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a server (running Ubuntu, but I can put a BSD/Solaris or other distro on if that helps) running beween my LAN and my sattelite modem (basically acting as a router). I would like to track inbound/outbound Internet useage in both time and bytes on a per-mac-address basis. How would I go about doing this? What utilities do I need?

share|improve this question
i suggest you stick to per-ip monitoring and trace mac-ip associations via arpwatch [ you'll also find it in defualt ubuntu / debian repository ] – pQd Dec 24 '09 at 17:17
up vote 1 down vote accepted

take a look at:

you'll find them in standard debian / ubuntu repository and both will provide you network usage stats based on ip in given subnet [ lan ] in last 24h / week / month.

bandwidthd will give you very basic breakdown of stats based on different protocols; ntop can provide you more detailed info.

both can be generate quite heavy load on the server if you analyze streams of tens of megabits, but i think you dont have to worry since probably you handle few mbits.

share|improve this answer
I had looked at bandwidthd before. Can it log by MAC or just by IP? People on my network have dynamic IPs, and I may not always know in advance what their MACs will be before they use (I can always collect later to correlate person to MAC) – singpolyma Dec 24 '09 at 16:41
Ooh, ntop seem to definitely have MAC logging – singpolyma Dec 24 '09 at 16:53

apt-get netspeed -y in fedora and centos gnmoe-applets-netspeed.*.rpm even you use ntop

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.