IP-SESSION

account tool for session/network traffic
[about] [features] [downloads] [screens] [todo] [sourceforge]

About

ip-session is a tool to manage session/traffic. It gathers network traffic info, such as sip, dip, sport, dport, proto, etc. from linux kernel; and accounts in/out TCP/UDP/ICMP bytes/pkgs, etc.; in addition, supports session management functions, such as query/modify/delete, etc.

Summary On Sourceforge:
https://sourceforge.net/projects/ip-session/

[back to top]

Features

  1. Query Session - get sip, sport, dip, dport, protocol, state from session table
  2. Query Session - account session info, such as in/out bytes/pkges perl protocol/session
  3. Query Session - session num per second, drop, new, icmp_err, etc
  4. Delete Session - delete session according to it's sip, sport, dip, dport, state, etc.
  5. Set Account IP - add/del source IP or destination IP for accounting
  6. Query Account Info - get bytes/pkges of TCP, UDP, ICMP and total
[back to top]

Downloads

Sources released under GNU License.
If you use this software, please send me an e-mail with comment. Thanks.

Downloads On Sourceforge
https://sourceforge.net/project/showfiles.php?group_id=162625

Latest Releases:
[07.13.2006] ip-session-0.1.tar.gz
Older Releases:
[03.23.2006] ip-session-0.1-rc2.tar.gz
[03.14.2006] ip-session-0.1-rc1.tar.gz

[back to top]

Screens

Normal session log:
kevin:/ip-session/user# ./ip_session -q
session_num:10
   id               sip             dip     sp      dp   proto            state
 3954        10.21.4.44   10.21.255.255    137     137      17              NEW
 3952           0.0.0.0 255.255.255.255     68      67      17              NEW
 3951        10.21.4.65   10.21.255.255    137     137      17              NEW
 3129       10.21.4.118   66.35.250.208  39136      22       6      ESTABLISHED
 3950        10.21.4.42 255.255.255.255     68      67      17              NEW
 3949        10.21.4.54   10.21.255.255    138     138      17              NEW
 3935         10.21.0.6   10.21.255.255    137     137      17              NEW
 2179        10.21.4.58     10.21.4.118   1488      22       6      ESTABLISHED
 3940        10.21.4.58     10.21.4.118   2167      22       6      ESTABLISHED
 3953        10.21.4.63   10.21.255.255    137     137      17              NEW

Normal traffic log:
[root@debian-server user]$ ./ip_session -a --list
acnt_num:6
            src             dst  b_tcp  p_tcp   b_udp   p_udp   b_icmp  p_icmp  b_other  p_other  b_all   p_all
        0.0.0.0         1.1.1.1     0       0       0       0       0       0       0        0        0       0
        0.0.0.0         1.1.1.2   594       5       0       0     756       9       0        0     1350      14
        0.0.0.0         2.2.2.2   273       5       0       0     756       9       0        0     1029      14
        2.2.2.2         0.0.0.0   594       5       0       0     756       9       0        0     1350      14
        1.1.1.2         0.0.0.0   273       5       0       0     756       9       0        0     1029      14
        1.1.1.1         0.0.0.0     0       0       0       0       0       0       0        0        0       0
[back to top]

TODO

  1. account in/out traffic info
  2. session time
  3. account traffic info of each session
  4. account session num per second, drop, new, icmp_err, etc
[back to top]


IP-SESSION
Mail: kevin_zhou at users.sourceforge.net