vantage - A bandwidth analysis/reporting tool

SYNOPSIS

Vantage is a utility to log aggregate bandwidth usage for a local subnet (eg, your home network). It logs data to a sqlite database and has a built-in web server to display statistics.

Vantage is still quite alpha, but it is usable. Stay tuned for more updates as I fix bugs and add features. Also keep in mind that you can easily mine the sqlite db file with other languages (eg, PHP or Python) or the sqlite monitor itself.

DOWNLOAD

Here's the latest snapshot:

http://www.zeroflux.org/proj/vantage/files/vantage-20060214.tar.gz

OPENWRT

Vantage should be run on the gateway router of your network, so it is sure to see all packets leaving your subnet. If you have a router that uses the OpenWRT firmware, then you can use these precompiled binaries on it. I've also included a binary of my port-knocking daemon, knockd.

Download here:

http://www.zeroflux.org/proj/vantage/files/openwrt-toys-20060214.tar.gz

EXAMPLE USAGE

Start the capture daemon:

# vantage-cap -i eth0 -f /var/db/vantage.db -d 192.168.0.0/24

Start the web server:

# vantage-srv -f /var/db/vantage.db -d

OTHER RANDOM STUFF

To be efficient, the capture daemon keeps recent bandwidth statistics in hash tables in memory, and only dumps the data once per hour. This is why you don't see numbers increasing in real-time. If you want to force a dump to db, you can HUP the process: killall -HUP vantage-cap
The web server listens on port 8008 by default.
The capture daemon only logs data that is passing through the router. Internal traffic (eg, 192.168.0.2 talking to 192.168.0.3) is not counted.
libpcap and sqlite3 are required to build the source. I have only tested it on Linux.

STATUS

Development has ceased, but the software is functional. If you'd like to contribute to this project, please contact me. I do not have time to work on it.

AUTHOR

Judd Vinet <jvinet@zeroflux.org>