Cz\u0119sto stajemy przed zadaniem policzenia ilo\u015bci aktywnych u\u017cytkownik\u00f3w w sieci lub stopnia wykorzystania adres\u00f3w IP.
\nNic prostszego, z pomoc\u0105 przychodzi nam hashlimit:<\/p>\n
#liczymy maszyny<\/p>\n
iptables -A PREROUTING -i eth1 -t mangle -m hashlimit \\
\n–hashlimit 1\/min \\
\n–hashlimit-mode srcip \\
\n–hashlimit-burst 1 \\
\n–hashlimit-name „ip_count” \\
\n–hashlimit-htable-size 10000 \\
\n–hashlimit-htable-max 10000 \\
\n–hashlimit-htable-expire 60000 \\
\n-j MARK –set-mark 5555<\/p>\n
Oczywi\u015bcie karta eth1 to karta wewn\u0119trzna naszej sieci, nie liczymy tego co do nas przychodzi tylko to co wychodzi z naszej sieci.<\/p>\n
Ok, super. Teraz jak odczyta\u0107 ilo\u015b\u0107 u\u017cytkownik\u00f3w?<\/p>\n
Tak:
\nwc -l \/proc\/net\/ipt_hashlimit\/ip_count | awk '{print $1}’<\/p>\n
Dalej ju\u017c mrtg, rdd lub co kto lubi.<\/p>\n","protected":false},"excerpt":{"rendered":"
Cz\u0119sto stajemy przed zadaniem policzenia ilo\u015bci aktywnych u\u017cytkownik\u00f3w w sieci lub stopnia wykorzystania adres\u00f3w IP. Nic prostszego, z pomoc\u0105 przychodzi nam hashlimit: #liczymy maszyny iptables -A PREROUTING -i eth1 -t mangle -m hashlimit \\ –hashlimit 1\/min \\ –hashlimit-mode srcip \\ –hashlimit-burst 1 \\ –hashlimit-name „ip_count” \\ –hashlimit-htable-size 10000 \\ –hashlimit-htable-max 10000 \\ –hashlimit-htable-expire 60000 \\ […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[6,4],"tags":[],"class_list":["post-12","post","type-post","status-publish","format-standard","hentry","category-iptables","category-sciaga-admina"],"_links":{"self":[{"href":"https:\/\/www.antynet.pl\/index.php\/wp-json\/wp\/v2\/posts\/12","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.antynet.pl\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.antynet.pl\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.antynet.pl\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.antynet.pl\/index.php\/wp-json\/wp\/v2\/comments?post=12"}],"version-history":[{"count":1,"href":"https:\/\/www.antynet.pl\/index.php\/wp-json\/wp\/v2\/posts\/12\/revisions"}],"predecessor-version":[{"id":13,"href":"https:\/\/www.antynet.pl\/index.php\/wp-json\/wp\/v2\/posts\/12\/revisions\/13"}],"wp:attachment":[{"href":"https:\/\/www.antynet.pl\/index.php\/wp-json\/wp\/v2\/media?parent=12"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.antynet.pl\/index.php\/wp-json\/wp\/v2\/categories?post=12"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.antynet.pl\/index.php\/wp-json\/wp\/v2\/tags?post=12"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}