bit-doctor / flowstat

Deamon using libipulog to log servers connections

Flowstat

This deamon will analyze all packet redirected to NFLOG rule in iptables and make statistics

Usage

You need to be root to start flowstat :

./flowstat

or

sudo ./flowstat

administrative port

telnet localhost 5454

options

• -c - change the listening channel of the netlink socket (channel 0 by default)
• -l - set a limit of different ip listed (no limit by default)
• -H - set the size of the closed connection's history (50 by default)

commands

• ip - show the listed ip
• connection param - where param is a pair of ips, show all active/non flushed connection from/to param
• stat param - where param is a pair of ips, show stat of param
• flux param - where param is a pair of ips, show history of param
• flush - flush the current data
• exit - close the connection
• kill - kill the deamon

output

port|input packet|input data|output packet|output data|first packet|last packet