Re: [Xen-users] Traffic Counting / port analysis using Xen 3.0.2?

["Robert Hulme" <rob@xxxxxxxxxxxx>]

> Can/must this be done in the Xen0-domain? Is there an more "elegant" way
> (security wise) to fire up an own virtual machine handling this and acting
> as a bridge itself?
I'm not sure I 100% understand what you're trying to do (you refer to
domains that you don't control?)...

I would suggest two possibilities:

1. Get raw bytes count from the interface from dom0
cat /sys/class/net/vif#{id}.0/statistics/tx_bytes
cat /sys/class/net/vif#{id}.0/statistics/rx_bytes

Where id is the id for the running domain from xm list.

2. Use iptables
You can do quite complex traffic monitoring using iptables. See:
http://www.netfilter.org/ ...

-Rob

--
------------------------------------------------------
"98.5% of DNA is considered to be junk DNA with no known purpose.
Maybe it's XML tags." -- Anon

"Debugging is twice as hard as writing the code in the first place.
Therefore, if you write the code as cleverly as possible, you are, by
definition, not smart enough to debug it." - Kernighan

http://www.robhulme.com/
http://robhu.livejournal.com/

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users