401 lines
12 KiB
Plaintext
401 lines
12 KiB
Plaintext
# collect
|
|
# global
|
|
# states entries|searches|inserts|removals [diff]
|
|
# counters match|bad-offset|fragment|...|translate [diff]
|
|
# (see pfctl -si output, same strings)
|
|
# interface name pass|block packets|bytes in|out v4|v6 [diff]
|
|
# queue name passed|dropped|other packets|bytes|number [diff]
|
|
|
|
collect 1 = interface "em0" pass bytes in ipv4 diff
|
|
collect 2 = interface "em0" pass bytes out ipv4 diff
|
|
collect 3 = interface "em0" pass bytes in ipv6 diff
|
|
collect 4 = interface "em0" pass bytes out ipv6 diff
|
|
collect 5 = global states entries
|
|
|
|
# hour ipv4
|
|
image "/var/www/htdocs/pfstat/hourly-traffic-ipv4.jpg" {
|
|
from 1 hours to now
|
|
width 980 height 300
|
|
left
|
|
graph 1 bps "in" "bits/s" color 0 192 0 filled,
|
|
graph 2 bps "out" "bits/s" color 0 0 255
|
|
right
|
|
graph 5 "states" "entries" color 192 192 0
|
|
}
|
|
# hour ipv6
|
|
image "/var/www/htdocs/pfstat/hourly-traffic-ipv6.jpg" {
|
|
from 1 hours to now
|
|
width 980 height 300
|
|
left
|
|
graph 3 bps "in" "bits/s" color 0 192 0 filled,
|
|
graph 4 bps "out" "bits/s" color 0 0 255
|
|
right
|
|
graph 5 "states" "entries" color 192 192 0
|
|
}
|
|
# daily ipv4
|
|
image "/var/www/htdocs/pfstat/daily-traffic-ipv4.jpg" {
|
|
from 1 days to now
|
|
width 980 height 300
|
|
left
|
|
graph 1 bps "in" "bits/s" color 0 192 0 filled,
|
|
graph 2 bps "out" "bits/s" color 0 0 255
|
|
right
|
|
graph 5 "states" "entries" color 192 192 0
|
|
}
|
|
# daily ipv6
|
|
image "/var/www/htdocs/pfstat/daily-traffic-ipv6.jpg" {
|
|
from 1 days to now
|
|
width 980 height 300
|
|
left
|
|
graph 3 bps "in" "bits/s" color 0 192 0 filled,
|
|
graph 4 bps "out" "bits/s" color 0 0 255
|
|
right
|
|
graph 5 "states" "entries" color 192 192 0
|
|
}
|
|
# weekly ipv4
|
|
image "/var/www/htdocs/pfstat/weekly-traffic-ipv4.jpg" {
|
|
from 1 weeks to now
|
|
width 980 height 300
|
|
left
|
|
graph 1 bps "in" "bits/s" color 0 192 0 filled,
|
|
graph 2 bps "out" "bits/s" color 0 0 255
|
|
right
|
|
graph 5 "states" "entries" color 192 192 0
|
|
}
|
|
# weekly ipv6
|
|
image "/var/www/htdocs/pfstat/weekly-traffic-ipv6.jpg" {
|
|
from 1 weeks to now
|
|
width 980 height 300
|
|
left
|
|
graph 3 bps "in" "bits/s" color 0 192 0 filled,
|
|
graph 4 bps "out" "bits/s" color 0 0 255
|
|
right
|
|
graph 5 "states" "entries" color 192 192 0
|
|
}
|
|
# monthly ipv4
|
|
image "/var/www/htdocs/pfstat/monthly-traffic-ipv4.jpg" {
|
|
from 1 months to now
|
|
width 980 height 300
|
|
left
|
|
graph 1 bps "in" "bits/s" color 0 192 0 filled,
|
|
graph 2 bps "out" "bits/s" color 0 0 255
|
|
right
|
|
graph 5 "states" "entries" color 192 192 0
|
|
}
|
|
# monthly ipv6
|
|
image "/var/www/htdocs/pfstat/monthly-traffic-ipv6.jpg" {
|
|
from 1 months to now
|
|
width 980 height 300
|
|
left
|
|
graph 3 bps "in" "bits/s" color 0 192 0 filled,
|
|
graph 4 bps "out" "bits/s" color 0 0 255
|
|
right
|
|
graph 5 "states" "entries" color 192 192 0
|
|
}
|
|
# year ipv4
|
|
#image "/var/www/htdocs/pfstat/yearly-traffic-ipv4.jpg" {
|
|
#from 12 months to now
|
|
#width 980 height 300
|
|
#left
|
|
#graph 1 bps "in" "bits/s" color 0 192 0 filled,
|
|
#graph 2 bps "out" "bits/s" color 0 0 255
|
|
#right
|
|
#graph 5 "states" "entries" color 192 192 0
|
|
#}
|
|
# year ipv6
|
|
#image "/var/www/htdocs/pfstat/yearly-traffic-ipv6.jpg" {
|
|
#from 12 months to now
|
|
#width 980 height 300
|
|
#left
|
|
#graph 3 bps "in" "bits/s" color 0 192 0 filled,
|
|
#graph 4 bps "out" "bits/s" color 0 0 255
|
|
#right
|
|
#graph 5 "states" "entries" color 192 192 0
|
|
#}
|
|
|
|
|
|
### ipv4 packets
|
|
collect 6 = interface "em0" pass packets in ipv4 diff
|
|
collect 7 = interface "em0" pass packets out ipv4 diff
|
|
collect 8 = interface "em0" block packets in ipv4 diff
|
|
collect 9 = interface "em0" block packets out ipv4 diff
|
|
|
|
# hour
|
|
image "/var/www/htdocs/pfstat/hourly-packets-ipv4.jpg" {
|
|
from 1 hours to now
|
|
width 980 height 300
|
|
left
|
|
graph 5 "pass in" "packets/s" color 0 192 0 filled,
|
|
graph 6 "pass out" "packets/s" color 0 0 255
|
|
right
|
|
graph 7 "block in" "packets/s" color 255 0 0,
|
|
graph 8 "block out" "packets/s" color 192 192 0
|
|
}
|
|
# daily
|
|
image "/var/www/htdocs/pfstat/daily-packets-ipv4.jpg" {
|
|
from 1 days to now
|
|
width 980 height 300
|
|
left
|
|
graph 5 "pass in" "packets/s" color 0 192 0 filled,
|
|
graph 6 "pass out" "packets/s" color 0 0 255
|
|
right
|
|
graph 7 "block in" "packets/s" color 255 0 0,
|
|
graph 8 "block out" "packets/s" color 192 192 0
|
|
}
|
|
# week
|
|
image "/var/www/htdocs/pfstat/weekly-packets-ipv4.jpg" {
|
|
from 1 weeks to now
|
|
width 980 height 300
|
|
left
|
|
graph 5 "pass in" "packets/s" color 0 192 0 filled,
|
|
graph 6 "pass out" "packets/s" color 0 0 255
|
|
right
|
|
graph 7 "block in" "packets/s" color 255 0 0,
|
|
graph 8 "block out" "packets/s" color 192 192 0
|
|
}
|
|
# month
|
|
image "/var/www/htdocs/pfstat/monthly-packets-ipv4.jpg" {
|
|
from 1 months to now
|
|
width 980 height 300
|
|
left
|
|
graph 5 "pass in" "packets/s" color 0 192 0 filled,
|
|
graph 6 "pass out" "packets/s" color 0 0 255
|
|
right
|
|
graph 7 "block in" "packets/s" color 255 0 0,
|
|
graph 8 "block out" "packets/s" color 192 192 0
|
|
}
|
|
# year
|
|
#image "/var/www/htdocs/pfstat/yearly-packets-ipv4.jpg" {
|
|
#from 12 months to now
|
|
#width 980 height 300
|
|
#left
|
|
#graph 5 "pass in" "packets/s" color 0 192 0 filled,
|
|
#graph 6 "pass out" "packets/s" color 0 0 255
|
|
#right
|
|
#graph 7 "block in" "packets/s" color 255 0 0,
|
|
#graph 8 "block out" "packets/s" color 192 192 0
|
|
#}
|
|
|
|
### ipv6 packets
|
|
collect 10 = interface "em0" pass packets in ipv6 diff
|
|
collect 11 = interface "em0" pass packets out ipv6 diff
|
|
collect 12 = interface "em0" block packets in ipv6 diff
|
|
collect 13 = interface "em0" block packets out ipv6 diff
|
|
|
|
# hour
|
|
image "/var/www/htdocs/pfstat/hourly-packets-ipv6.jpg" {
|
|
from 1 hours to now
|
|
width 980 height 300
|
|
left
|
|
graph 10 "pass in" "packets/s" color 0 192 0 filled,
|
|
graph 11 "pass out" "packets/s" color 0 0 255
|
|
right
|
|
graph 12 "block in" "packets/s" color 255 0 0,
|
|
graph 13 "block out" "packets/s" color 192 192 0
|
|
}
|
|
# daily
|
|
image "/var/www/htdocs/pfstat/daily-packets-ipv6.jpg" {
|
|
from 1 days to now
|
|
width 980 height 300
|
|
left
|
|
graph 10 "pass in" "packets/s" color 0 192 0 filled,
|
|
graph 11 "pass out" "packets/s" color 0 0 255
|
|
right
|
|
graph 12 "block in" "packets/s" color 255 0 0,
|
|
graph 13 "block out" "packets/s" color 192 192 0
|
|
}
|
|
# week
|
|
image "/var/www/htdocs/pfstat/weekly-packets-ipv6.jpg" {
|
|
from 1 weeks to now
|
|
width 980 height 300
|
|
left
|
|
graph 10 "pass in" "packets/s" color 0 192 0 filled,
|
|
graph 11 "pass out" "packets/s" color 0 0 255
|
|
right
|
|
graph 12 "block in" "packets/s" color 255 0 0,
|
|
graph 13 "block out" "packets/s" color 192 192 0
|
|
}
|
|
# month
|
|
image "/var/www/htdocs/pfstat/monthly-packets-ipv6.jpg" {
|
|
from 1 months to now
|
|
width 980 height 300
|
|
left
|
|
graph 10 "pass in" "packets/s" color 0 192 0 filled,
|
|
graph 11 "pass out" "packets/s" color 0 0 255
|
|
right
|
|
graph 12 "block in" "packets/s" color 255 0 0,
|
|
graph 13 "block out" "packets/s" color 192 192 0
|
|
}
|
|
# year
|
|
#image "/var/www/htdocs/pfstat/yearly-packets-ipv6.jpg" {
|
|
#from 12 months to now
|
|
#width 980 height 300
|
|
#left
|
|
#graph 10 "pass in" "packets/s" color 0 192 0 filled,
|
|
#graph 11 "pass out" "packets/s" color 0 0 255
|
|
#right
|
|
#graph 12 "block in" "packets/s" color 255 0 0,
|
|
#graph 13 "block out" "packets/s" color 192 192 0
|
|
#}
|
|
|
|
### states
|
|
collect 14 = global states inserts diff
|
|
collect 15 = global states removals diff
|
|
collect 16 = global states searches diff
|
|
|
|
# hour
|
|
image "/var/www/htdocs/pfstat/hourly-states.jpg" {
|
|
from 1 hours to now
|
|
width 980 height 300
|
|
left
|
|
graph 14 "inserts" "states/s" color 0 192 0 filled,
|
|
graph 15 "removals" "states/s" color 0 0 255
|
|
right
|
|
graph 16 "searches" "states/s" color 255 0 0
|
|
}
|
|
# daily
|
|
image "/var/www/htdocs/pfstat/daily-states.jpg" {
|
|
from 1 days to now
|
|
width 980 height 300
|
|
left
|
|
graph 14 "inserts" "states/s" color 0 192 0 filled,
|
|
graph 15 "removals" "states/s" color 0 0 255
|
|
right
|
|
graph 16 "searches" "states/s" color 255 0 0
|
|
}
|
|
# week
|
|
image "/var/www/htdocs/pfstat/weekly-states.jpg" {
|
|
from 1 weeks to now
|
|
width 980 height 300
|
|
left
|
|
graph 14 "inserts" "states/s" color 0 192 0 filled,
|
|
graph 15 "removals" "states/s" color 0 0 255
|
|
right
|
|
graph 16 "searches" "states/s" color 255 0 0
|
|
}
|
|
# month
|
|
image "/var/www/htdocs/pfstat/monthly-states.jpg" {
|
|
from 1 months to now
|
|
width 980 height 300
|
|
left
|
|
graph 14 "inserts" "states/s" color 0 192 0 filled,
|
|
graph 15 "removals" "states/s" color 0 0 255
|
|
right
|
|
graph 16 "searches" "states/s" color 255 0 0
|
|
}
|
|
# year
|
|
#image "/var/www/htdocs/pfstat/yearly-states.jpg" {
|
|
#from 12 months to now
|
|
#width 980 height 300
|
|
#left
|
|
#graph 14 "inserts" "states/s" color 0 192 0 filled,
|
|
#graph 15 "removals" "states/s" color 0 0 255
|
|
#right
|
|
#graph 16 "searches" "states/s" color 255 0 0
|
|
#}
|
|
|
|
### create ALT-Q errors
|
|
#collect 16 = queue "q_max" pass bytes diff
|
|
#collect 17 = queue "q_hig" pass bytes diff
|
|
#collect 18 = queue "q_def" pass bytes diff
|
|
#collect 19 = queue "q_low" pass bytes diff
|
|
|
|
#image "/var/www/htdocs/pfstat/pfstat-queues.jpg" {
|
|
#from 1 days to now
|
|
#width 980 height 300
|
|
#left
|
|
#graph 16 bps "max" "bits/s" color 255 0 0,
|
|
#graph 17 bps "hig" "bits/s" color 192 192 0,
|
|
#graph 18 bps "def" "bits/s" color 0 192 0,
|
|
#graph 19 bps "low" "bits/s" color 0 0 255
|
|
#}
|
|
|
|
### Counters
|
|
collect 20 = global counters match diff
|
|
collect 21 = global counters bad-offset diff
|
|
collect 22 = global counters fragment diff
|
|
collect 23 = global counters short diff
|
|
collect 24 = global counters normalize diff
|
|
collect 25 = global counters memory diff
|
|
collect 26 = global counters bad-timestamp diff
|
|
collect 27 = global counters congestion diff
|
|
collect 28 = global counters ip-option diff
|
|
collect 29 = global counters proto-cksum diff
|
|
collect 30 = global counters state-mismatch diff
|
|
collect 31 = global counters state-insert diff
|
|
collect 32 = global counters state-limit diff
|
|
collect 33 = global counters src-limit diff
|
|
collect 34 = global counters synproxy diff
|
|
collect 35 = global counters translate diff
|
|
|
|
# hour
|
|
image "/var/www/htdocs/pfstat/hourly-errors.jpg" {
|
|
from 1 hours to now
|
|
width 980 height 300
|
|
left
|
|
graph 22 "frag" "/s" color 192 0 192,
|
|
graph 27 "cong" "/s" color 0 192 192,
|
|
graph 28 "iopt" "/s" color 0 0 255,
|
|
graph 29 "csum" "/s" color 192 192 0,
|
|
graph 30 "mism" "/s" color 255 0 0
|
|
# others are usually all zero here
|
|
right
|
|
graph 20 "match" "/s" color 0 192 0
|
|
}
|
|
# daily
|
|
image "/var/www/htdocs/pfstat/daily-errors.jpg" {
|
|
from 1 days to now
|
|
width 980 height 300
|
|
left
|
|
graph 22 "frag" "/s" color 192 0 192,
|
|
graph 27 "cong" "/s" color 0 192 192,
|
|
graph 28 "iopt" "/s" color 0 0 255,
|
|
graph 29 "csum" "/s" color 192 192 0,
|
|
graph 30 "mism" "/s" color 255 0 0
|
|
# others are usually all zero here
|
|
right
|
|
graph 20 "match" "/s" color 0 192 0
|
|
}
|
|
# week
|
|
image "/var/www/htdocs/pfstat/weekly-errors.jpg" {
|
|
from 1 weeks to now
|
|
width 980 height 300
|
|
left
|
|
graph 22 "frag" "/s" color 192 0 192,
|
|
graph 27 "cong" "/s" color 0 192 192,
|
|
graph 28 "iopt" "/s" color 0 0 255,
|
|
graph 29 "csum" "/s" color 192 192 0,
|
|
graph 30 "mism" "/s" color 255 0 0
|
|
# others are usually all zero here
|
|
right
|
|
graph 20 "match" "/s" color 0 192 0
|
|
}
|
|
# month
|
|
image "/var/www/htdocs/pfstat/monthly-errors.jpg" {
|
|
from 1 months to now
|
|
width 980 height 300
|
|
left
|
|
graph 22 "frag" "/s" color 192 0 192,
|
|
graph 27 "cong" "/s" color 0 192 192,
|
|
graph 28 "iopt" "/s" color 0 0 255,
|
|
graph 29 "csum" "/s" color 192 192 0,
|
|
graph 30 "mism" "/s" color 255 0 0
|
|
# others are usually all zero here
|
|
right
|
|
graph 20 "match" "/s" color 0 192 0
|
|
}
|
|
# year
|
|
#image "/var/www/htdocs/pfstat/yearly-errors.jpg" {
|
|
#from 12 months to now
|
|
#width 980 height 300
|
|
#left
|
|
#graph 22 "frag" "/s" color 192 0 192,
|
|
#graph 27 "cong" "/s" color 0 192 192,
|
|
#graph 28 "iopt" "/s" color 0 0 255,
|
|
#graph 29 "csum" "/s" color 192 192 0,
|
|
#graph 30 "mism" "/s" color 255 0 0
|
|
## others are usually all zero here
|
|
#right
|
|
#graph 20 "match" "/s" color 0 192 0
|
|
#}
|