RE: [gentoo-server] Measure/Control traffic per user/customer

[Chris Schwerdt]

I have a bit of experience with this issue.  I've installed
mod_throttle which allows me to monitor bytes transferred per vhost (w/ out
apache2 + perchild).  Mod_throttle also has a statistics page (tab
delimited) that I have written a script to parse through and continually
update vhost transfer totals.  Mod_throttle also allows you to set a limit
on bytes transferred per vhost.  I use analog for vhost reporting.  If you
have qmail, you can install qmailanalog and get per vhost byte statistics
and merge that w/ totals from mod_throttle.  Most ftp daemons will allow you
to log all files transferred.  I have not looked at the iptables owner match
but from what I have seen it is only applicable in the OUTPUT chain.
Basically everything I've put together is a major hack job linking users and
applications they use.  I have no monitoring of individual users bandwidth
consumption when they are on the local machine but I do monitor the
interface bandwidth and if I see that jumping really high I can track down
the offending user.  Also, apache2 perchild + php is crap.  I'd look into
using the php+suexec patch.  If anyone has any all-in-one solutions or
better ideas, I'd be interested in hearing about it.

References:
Mod_throttle: http://www.snert.com/Software/mod_throttle/
Qmailanalog: http://cr.yp.to/qmailanalog.html
PHP SuExec: http://www.localhost.nl/patches/

Chris Schwerdt

-----Original Message-----
From: Florian Huber [mailto:florian.huber@×××××××××××.de] 
Sent: Tuesday, December 09, 2003 2:06 AM
To: gentoo-server@g.o
Subject: [gentoo-server] Measure/Control traffic per user/customer


Hi list,
does anyone of you have a good solution for measuring  the monthly traffic
amount for several customers on a web-hosting machine?

I've heard about logging apache with a per-vhost basis and then caclulate
the traffic. But what about ftp, mail or http headers? And which program do
you suggest for logfile analysis? webalizer? analog et. al.?

The second solution I'm thinking of is using iptables with the owner-match
rule and apache2 with the perchild mpm which both are marked as
experimental! Has anyone already experience with this?

If tried apache2 + perchild mpm + mod_php, but apache does not start 
anymore. I think it's related to pear, but I had no to search the internet
yet.

TIA
	Florian Huber