[strongSwan] StrongSwan traffic accounting? is it possible？

[Jacky.He]

Luke,

Can you provide more information? Thanks.

 

Jacky.

 

From: Luke Pascoe [mailto:Luke.Pascoe at gen-i.co.nz] 
Sent: Monday, October 17, 2011 4:51 AM
To: jacky_he; users at lists.strongswan.org
Subject: RE: [strongSwan] StrongSwan traffic accounting? is it possible£¿

 

I would have thought you could use iptables with something like ipac_ng (at
least, that¡¯s what I used to use for accounting ¡°back in the day¡±)

 

I haven¡¯t done accounting for VPN traffic myself, but I imagine you should
be able to match by policy eg ¡°-m policy ¨Cpol ipsec¡± to be sure you¡¯re
counting encapsulated traffic.

 

Luke.

 

From: users-bounces+luke.pascoe=gen-i.co.nz at lists.strongswan.org
[mailto:users-bounces+luke.pascoe=gen-i.co.nz at lists.strongswan.org] On
Behalf Of jacky_he
Sent: Monday, 17 October 2011 12:35 a.m.
To: users at lists.strongswan.org
Subject: [strongSwan] StrongSwan traffic accounting? is it possible£¿

 

Hi everyone,

 

Currently StrongSwan supports radius authenticate, but lack of accounting
feature.

Is it possible to do traffic accounting on strongswan ipsec connection? Or
to use iptables?

Please give me some hints.

 

Best Regards

Jacky

 



__________ Information from ESET NOD32 Antivirus, version of virus signature
database 6542 (20111014) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20111017/f597a355/attachment.html>