Intevation » iam

iam - iptables accounting monster

What is iam?

iptables accounting monster (iam) is a traffic reporting tool for iptables. Currently it can generate daily reports in plain text and HTML format, or summaries of these daily reports for a complete month or year.

Why did I write iam? Why do you want to use iam?

While looking for a traffic reporting tool, I didn't find something that meets my requirements. So I started to write iam, which:
  • is free software
  • works with Linux 2.4 iptables
  • is written in Python, a readable language (i.e. not perl, awk or shell script)
  • is secure (i.e. only be root where you need to be root)
  • doesn't depend on a specific web server or database server
  • can generate reports for routers or servers
  • can generate reports in plain text or HTML format
  • can calculate costs for traffic (currently only price per MB, but bulk discounts should be included soon)

You don't want to use iam?

This is a list of free software alternatives to iam:
IP Accounter:
http://sourceforge.net/projects/ipac-ng/
IP-Accounting Grapher:
http://dev.lashout.net/iag/
BW ACCT:
http://www.linespeed.net/index.php?page=projects&project=bwacct
fwanalog:
http://tud.at/programm/fwanalog/
pmacct (Promiscuous mode IP Accounting package):
http://www.ba.cnr.it/~paolo/pmacct/

License

Copyright (C) 2001, 2002
Intevation GmbH <intevation@intevation.de>
Georgstraße 4, D-49074 Osnabrueck,
Germany

Author:
Thomas Arensdsen Hein <thomas@intevation.de>
iam is released under the GNU General Public License.

Download

Intevation ftp server:

ftp://ftp.intevation.de/iam/
(iam-0.0.2.tar.gz, HOWTO, README, TODO)
http://ftp.intevation.de/iam
(iam-0.0.2.tar.gz, HOWTO, README, TODO)

Mirror at GWDG:

ftp://ftp.gwdg.de/pub/misc/freegis/intevation/iam/
http://ftp.gwdg.de/pub/misc/freegis/intevation/iam/

Samples

Sample HTML report:

IP traffic (2001-08-01..2001-08-31):
traffic cost description
2465.3 MB   local (local network)
586.4 MB   intevation (Intevation office)
3051.7 MB   free of charge
     
1770.8 MB 88.54 DM www (http/https/caudium)
1531.7 MB 76.58 DM cvs (grass-cvs)
1423.8 MB 71.19 DM ip_local_port_range (probably FTP)
1307.3 MB 65.37 DM ftp (FTP (without passive data))
203.8 MB 10.19 DM mail (smtp)
0.7 MB 0.03 DM misc (ssh, dns, identd)
0.6 MB 0.03 DM outgoing (without other listed services)
0.0 MB 0.00 DM rsync (rsync server (not backup))
6238.6 MB 311.93 DM internet services
     
0.2 MB 0.01 DM related (related connections)
0.2 MB 0.01 DM unknown (not in any chain)
0.0 MB 0.00 DM fragment (fragmented packets)
0.4 MB 0.02 DM other traffic (unspecified)

Sample plain text report:

                IP traffic (2001-08-01..2001-08-31):                
                ====================================                
| traffic   | cost      | description                              |
+-----------+-----------+------------------------------------------+
| 2465.3 MB |           | local (local network)                    |
|  586.4 MB |           | intevation (Intevation office)           |
+-----------+-----------+------------------------------------------+
| 3051.7 MB |           | free of charge                           |
+-----------+-----------+------------------------------------------+
|           |           |                                          |
| 1770.8 MB |  88.54 DM | www (http/https/caudium)                 |
| 1531.7 MB |  76.58 DM | cvs (grass-cvs)                          |
| 1423.8 MB |  71.19 DM | ip_local_port_range (probably FTP)       |
| 1307.3 MB |  65.37 DM | ftp (FTP (without passive data))         |
|  203.8 MB |  10.19 DM | mail (smtp)                              |
|    0.7 MB |   0.03 DM | misc (ssh, dns, identd)                  |
|    0.6 MB |   0.03 DM | outgoing (without other listed services) |
|    0.0 MB |   0.00 DM | rsync (rsync server (not backup))        |
+-----------+-----------+------------------------------------------+
| 6238.6 MB | 311.93 DM | internet services                        |
+-----------+-----------+------------------------------------------+
|           |           |                                          |
|    0.2 MB |   0.01 DM | related (related connections)            |
|    0.2 MB |   0.01 DM | unknown (not in any chain)               |
|    0.0 MB |   0.00 DM | fragment (fragmented packets)            |
+-----------+-----------+------------------------------------------+
|    0.4 MB |   0.02 DM | other traffic (unspecified)              |
+-----------+-----------+------------------------------------------+
Last modified: October 22nd, 2008 Thomas Arendsen Hein <thomas@intevation.de>