23.07.2004 01:15 – trafflogger 0.8.1 released, dynamic ip support added
13.03.2005 18:05 – trafflogger 0.8.1–1 released, bugfix: no graphic for ppp ifaces
Description
This is a conf based traffic logger, each conf log in/out traffic for:
some definable hosts
in a definable device
which match a (optional) definable pcap filter
All the logged data can be displayed (actually graphed) via a web cgi.
So you can get golbal view of your network load and either get a closer look for any of the hosts(very usefull if you are a [mini|wanabe]ISP). Keep in mind that you can make multiples confs for the same host/s, changing only de pcap rule, doing this you are taking photos of your network from multiples angles. You can make a conf to log web traffic, otherone to log mail traffic, and otherone to log kazaa traffic, and finally one to log all traffic. You can also use pcap filter to discrime unwanted traffic for a specific conf. Very flexible ah?
If the trafflogger web page are going to habe a lot of visits, then may be intresting to use apache with mod_perl; this make apache load perl interpeter only one time (now embebed in apache), and makes your program to be compiled only the first execution time, after this, the program is a binary in the apache perl cache, whichs ends in a huge perfomance increment (up to one thousend percent). The perl-cgi that comes with trafflogger was tested against apache 1.3 and mod_perl 1, in a debian stable.
If the trafflogger daemon has a lot of configurations and this puts your cpu under heavy load averge, then you can try perlcc; which is a perl-bytecode generator (among other things). I tested it with perlcc of debian unstable and work(perlcc -B trafflogger.pl), but whit debian stable's perlcc not. There is a plan to port trafflogger into C/C++, the pcacp API is the same, but i need some free time.
Thanks go to...
Sistecom S.A., pepole who actually has the need of trafflogger and pay part of the development
9 de Julio 1257 Piso: 10 Dpto: 108 – Phone: +54 261 420 0997
Autors
Luciano Ruete – luciano at praga org ar (apologies for my limited english)
