Re: Traffic Accounting
On Sun, Jul 20, 2003 at 07:01:24PM +0300, kgb wrote:
>On Sun, 2003-07-20 at 15:58, Michelle Konzack wrote:
>> Hello Russian Secret Service Agent...
>>
>> Am 23:35 2003-07-19 +0300 hat kgb geschrieben:
>> >
>> >Hello,
>> >
>> >Which is best way for traffic accounting i use ipac-ng but i don't like
>> >it anymore because it make my system under high load.
>> >
>> >Thanks in advanced.
>>
>> I think there is no other choice...
>>
>> I use ipac on a 100 MBit LAN where I count the traffic of five
>> 11 MBit WaveLAN-Channels... where ipac has two NIC's and is
>> In-Line between the Main-Router and the Switch where the Lucent
>> ORINOCO COR-1100 and wireless Bridges are connected...
>>
>> Each channel has 120 Clients...
>>
>> I use a AMD Athlon XP 2400+ with 512 MByte of memory and the
>> load is around 17...
>>
>> I have for each client (all fixed IP's) two rules (rx/tx) to the
>> Internet and two rules (rx/tx) to the internal mail-Server.
>>
>> So I have completly 2400 rules plus som special-rules to count
>> ftp, http, shttp and mail traffic.
>>
>> In summary around 2500 rules.
>>
>> What Do you have ???
>>
>> Thanks
>> Michelle
>>
>I have over 2000 rules "bgpeer tx/rx", "internet tx/rx", "local traffic tx/rx"
>machine is AMD Athlon XP 1700+ with 1G ram i forgot how many rules are
>limit in iptables but when they are so many this is really sucks this is
>on 100Mbit LAN the problem is when fetchipac is running and ipacsum because
>file in /var/lib/ipac-ng/data.db is over 5G when file i smaller traffic is smaller
>or fetchipac and ipacsum is not running everything is fine i think thats can not be
>the only one way...
>
I don't run it, I'm just a by stander; but I bet you are not dealing
with cpu issues but disk io. run top and compare system load to your cpu
state % idle time.
If you've got idle cpu, and load over one, you are most likely dealing
with disk speed not cpu.... time for hardware scsi, striped raid, on 15k
rpm disks :-P unfortunatly that's a lot more difficult and expensive
than upgrading cpu and ram :-\
// George
--
GEORGE GEORGALIS, System Admin/Architect cell: 646-331-2027 <IXOYE><
Security Services, Web, Mail, mailto:george@galis.org
Multimedia, DB, DNS and Metrics. http://www.galis.org/george
Reply to: