I have following set up :
a machine with a public IP with several machines with static IP behind it (NAT).
How would I monitor the traffic they generate on a per IP basis (the LAN ip to which traffic gets forwarded) ?
Server Fault is a question and answer site for system and network administrators. It only takes a minute to sign up.Sign up to join this community
If your gateway box is running Linux, you could use an
-j LOG parameter. Something like this:
iptables -A FORWARD -i eth1 -o eth0 -j LOG
You'd then have to configure your
syslog to send that log data somewhere where the I/O won't hurt the process. You could also limit the I/O required by only logging tcp connection packets. Just replace the above with this:
iptables -A FORWARD -i eth1 -o eth0 -p tcp --syn -j LOG