ProFTPd Traffic?

[gregm]

Anyone have a good way to monitor traffic via ProFTPd ?

I'm seeing some incoming spikes in my overall traffic graph, want to see what they are.

I can write a log analizer, and check xferlog for files, but entries are only added after it's complete, so it wouldn't sync up properly to the overall traffic graph. (it would show a big burst after the overall graph went back to normal)

It would be very cool to be able to make a stacked graph of web, ftp, and mail bandwidth, then overlay a line showing the bandwidth across eth0.. anytime it spikes up above the stacked values, it means that something else is generating traffic.. would be easy to spot someone trying to DOS attack or something sending out a lot of data that's not supposed to, etc.

[MaGuS]

You got a working script?

I'm also looking for something like this

MaGuS

[gregm]

I actually ended up using ipchains to monitor traffic for each protocol. You can see what I have setup at: http://status.digitalorphans.org/traffic_graphs.php

The scripts I used for this, and a little readme are available at www.djgeespot.com/ipacct-1.0.tar.gz