nacctstats(1)

NAME
nacctstats - generate nacctd statistics

SYNOPSIS
... | nacctstats.pl

DESCRIPTION
nacctstats processes log files created by the net-accouting daemon nacctd and generates a statistical summary. The log files are read from STDIN and written to STDOUT.

The format of the logfile entries (read from STDIN) must be as follows (in this order):

description | example
timestamp (epoch) | 1000258171
protocol number | 17
source ip | 128.0.0.1
source port | 513
destination ip | 128.0.0.255
destination port | 513
packets | 3
packet length | 264
interface name | eth1

To achieve this all fields 1-9 must be enabled in the config file /etc/naccttab.

EXAMPLES
A simple example looks like this:

    cat net-acct.log | nacctstats.pl

A more sophisticated example is the following one.

    zcat /var/log/net-acct/net-acct.log.*.gz | \
    cat - /var/log/net-acct/net-acct.log{,.0} | \
    nacctstats.pl | more

Which can be simplified to the following expression:

    zcat -f /var/log/net-acct/net-acct.log* | \
    nacctstats.pl | more

FILES

/var/log/net-acct/*
    The log files from the nacctd. See the DESCRIPTION section above for more information about configuring the daemon to produce usable files for this program.

SEE ALSO
nacctd, crontab(5), mail(1), zcat(1)

BUGS
Far too many. The author is working on them. Please send patches and updates!

AUTHOR
This program and man page were written by Thomas Prokosch <thomas@nadev.net> and are available under the GPL v2.