As a result I decided to write a small set of scripts to monitor and display bandwidth usage of radius manager accounts.

The radius manager database does not contain granular usage records since radius manager does not keep uniform time period records. Each time a session is disconnected a new record is created in the radacct table. Since the time-span of this record depends on the actual connection duration it could span from a few seconds to more than a day.  This means that it is impossible to get granular hourly or daily stats from this table.

My solution is simple. I use a Perl script to process the radacct table on a regular interval. When I read the table I gather the sum of all in and out bytes for each user, irrespective of how many sessions they initiated since my last check.

I then compare the new totals to the previous totals. Since I run the script at a regular interval, say 5 minutes, I thus know how much bandwidth this user has consumed in the last 5 minutes.

I then summarize this data into my own set of tables where I keep hourly, daily and monthly totals for each user. This script is called from a cron task so runs every five minutes, ensuring I have accurate and consistent statistics.

I then wrote some HTML (with some PHP and jQuery) to give me a summary of each user’s usage for a given period (hour, day or month). I then allow the end user to sort this by various columns.

To make the data retrieved more relevant I also read the service details from the rm_users and rm_services tables. This allows me to show what the user’s monthly limit is, and to then show a % used value in the results. User rows that are over a certain threshold (ay 90% used) are then highlighted in a different color.

I also wrote a graph component which will show a highlighted user’s usage at an hourly level over any given day or at a daily level for a given month.finally I show the actual session usage records from the radacct table below the graph

This allows users to monitor their own usage. From an ISP management perspective this view allows admins to quickly bring up usage history for an individual account, and to zero in on accounts about to be capped, etc. Both hotspot and PPoE accounts are monitored, and can be reported on.

A consortium of Garden Route based companies is ready to launch an IT technology hub in George which will create jobs and train up new skills.

George’s IT company owner Imel Rautenbach is currently drumming up support for the initiative at provincial and national level.  The consortium aims to use the Western Cape Province’s business arm to market and develop in order to get launched nationally and internationally. IT technology and electronic centred businesses will be the engine that will drive this local initiative. “The idea behind pooling resources and skills is to keep all our software and hardware developmental work in the Garden Route. We already have around 30 businesses on our data base that have all the necessary skills and technology to form the nucleus. “

“We plan to link up our efforts with that of the Province. By collectively marketing and taking on projects jointly we can land contracts which may otherwise have been outsourced to companies outside the region. With the skills data base we now have we can take on big contracts, and the risk of one small company folding, is eliminated because collectively we can pool our skills to ensure continuity” says Rautenbach who was recently elected the Vice President of the George Chamber of Business.

On www.gardenrouteconsortium.co.za you can read more about their quest to “Provide project management and quality control services during the full lifecycle of large and complex projects. To define, enable, and manage key technology growth areas in the region.”

Provincial government support

Rautenbach has just returned from a very successful round of meetings with Western Cape Government on how the IT Consortium can link in to and benefit from the Western Cape’s own IT strategy and marketing initiatives. Alan Winde, MEC for Finance and Tourism is very excited about the potential the consortium holds for the Garden Route region. He has committed to bringing a high powered delegation of provincial officials to the region to further explore this potential.

”This initiative fits perfectly with our own plans for the growing of the Technology industry within province”, said Jo-Anne Johnston, Western Cape’s Chief Director of Trade and Industry Development.  She has committed her department’s full support for the initiative and is exploring ways of bringing other government departments onboard as well.

Jenny McKinnel, Executive Director of the Cape IT Initiative (CITI), is equally excited. Citi is a non-profit organisation established in 1998 to develop and support the information and communications technology (ICT) cluster in the Western Cape. “CITI is keen to support the Garden Route IT Consortium as their goals are directly in line with our own”, said McKinnel.  CITI are going to be working together with the Garden Route IT Consortium to unlock government funding and help promote the region as an IT destination, especially focussing on the impressive line-up of currently supplied services and R&D projects the various consortium members are working on.

Research and Development

The Consortium also has a strong focus on Research and Development (R&D), with several innovations currently in the works. These includes projects like fridge magnets that will show the current water level in your rain tank, a stock theft project that tracks animal and vehicle movements on farms in real time and alerts the farmers the moment the animal’s movements indicates distress, as well as a project to track hikers in remote mountain hiking trails.

CITI’s McKinnel is putting her full support behind the formation of a new R&D Lab in the Garden Route, which will help accelerate these R&D ventures. The Western Cape Agriculture department has also been tasked to get involved in some of these projects. DTI and other government funding for R&D spending will be applied for to cover the lab setup and initial phases of some of these projects. Talks with the Small Enterprise Development Agency (SEDA) on how it can assist the consortium in its R&D and marketing initiatives is ongoing.

Wireless technology is ready to be unfolded

As part of the R&D venture a state of the art wireless network is being set up. This network will eventually cover the entire Garden Route but is currently being rolled out in the George area. The network uses the latest wireless technology which promises much faster speed than traditional networks.

The network will be non-commercial and completely free to join. The network will not supply internet access but rather will be a backbone for R&D projects and educational programs.  Through wireless technology business can monitor activities through CCTV camera link-ups and WEBCAMs. Regional weather and water consumption monitoring can be done for instance through wireless technology.  “The potential of the new network is limitless. With remote monitors farmers can even check-up on where their cattle is grazing, or see what vehicles are accessing their farms.” said an excited Rautenbach.

Western Province Government is busy drafting a policy on City based networks and will be liaising with the consortium to learn from the initiatives taken in the Garden Route.

Training
On of the consortium’s major aims is to boost education in the Southern Cape. The Massachusetts Institute of Technology (MIT University) in the USA, has made available to the consortium around 2000 online programs focussing on science and technology. These programs will be made available to local schools completely free of charge, once they have connected to the new network.  ”The beauty of this is that it is all so achievable. Video conferencing can be set up so that children in a small rural school can also listen to and view someone in the USA giving a lecture and so be brought into the world of science and technology.” Students can do courses as well through internet. Ms Johnston from Western Cape Government is currently exploring ways of unlocking government funding to get all the region’s schools connected to this initiative.

Virtual hub

“By creating a virtual hub, we want to create a momentum which will bring about enough technology based work here in George which will mean that those people who are currently commuting to bigger centres, and living in George, can in future work here as well.
“We are having a road show to launch the roll-out and we are pleased that Western Cape Finance and Tourism Minister Allan Winde’s revitalization programme happens to coincide and slot in with our initiatives, and we hope to tap into those being rolled out.”

For more info contact Imel Rautenbach on 044 802 0402 or visit the consortium website at www.gardenrouteconsortium.co.za or send an email to info@gardenrouteconsortium.co.za

During the last few months the average ADSL bandwidth usage has grown to over 50 GB per month.  As bandwidth is still relatively expensive in SA (I use Afrihost’s excellent value for money ADSL at R29/GB) I needed to see where this actually goes.

The solution is a ubuntu based linux server with a collection of different open source products installed, plugged into the network just before the traffic enters the internet.

The ideal place for this server is between the network switch and the default gateway.  All traffic from devices on the inside of the bridge will now have to pass through the bridge server before entering the internet.

The server contains two network interfaces and is configured in bridge mode, allowing network traffic to pass through the server transparently, without even being aware of being scanned.

The key to this working is by bridging both ethernet interfaces together, using the ubuntu bridge-utils package and brctl command. Also make sure that http traffic  destined for the web gets redirected to dansguardian for filtering before leaving the network.

Using bridge mode has the added advantagew that it is not only completely invisible, it also require no changes on the existing netork pc’s. As long as it is placed just before the external gateway / firewall then all traffic will pass through it, including hardware devices like wifi routers, etc.

Once the server is installed, configured and switched into bridge mode the necessary monitoring software is installed. I use squid as a proxy server, dansguardian for traffic filtering and ntop for bandwith monitoring.

Dansguardian is great for rule based filtering, but comes with a static set of rules. I expanded my configuration by adding blacklists from shalla. The shalla lists are broken down by category and contains over 1.3 million entries.  As the lists are updated frequently I configured a cron job to download the lists nightly and copy it to the appropriate folders.

In dansguardian I then enable the specific categories that needs to be blocked, like porn, gambling, etc. Dansguard also contains exception lists for blocking or unblocking specific sites, keywords or ip addresses.

Another handy feature of dansguardian is that is uses clamav to automatically scan all downloaded files for virusses before letting it through.

Squid is configured as a transparent proxy server, allowing traffic caching and reporting. Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response times by caching and reusing frequently-requested web pages.

Ntop is used to monitor and report on all network traffic passing through the server. When configuring ntop make sure to set it to watch the external interface only, so you do not pick up traffic not destined for the internet.

Iptables is used as a firewall for blocking specific protocols or destinations, and also for forwarding all HTTP traffic destined for the internet to dansguardian, which applies its rule based filters and then pass the traffic on to squid, which in turn passes it on to the internet if not served from the local cache.

Some outstanding issues is dealing effectively with bittorrent and peer to peer traffic, without having to create countless manual rules. For now the ntop reports give clear usage by source, target, protocol, etc. It is relatively easy to identify bandwith hogs and deal with them, but it takes time and is a re-active process rather than being pro-active.

Next step is to automate the creation of iptable firewall rules on the fly to filter traffic as it is identified as inappropriate. Another todo is to add is to scan mail for spam and virusses.

Thanks to the huge surge in online applications and cloud computing, combined with more affordable and faster  broadband connections it is now possible to make full use of online apps in South Africa.

These days I rotate between a office Laptop with a big screen, a desktop at home, an ultra portable netbook and an iphone. Each device has its time and place, but it has always been a nightmare keeping everything in sync, from contacts to emails to passwords to documents.  This was even more of a pain every time I had to re-install any of these devices.

Well, now it is a different story, and those about to re-install as part of their Windows 7 upgrade should take note.

I can have a newly installed PC ready with all my files, emails, bookmarks, passwords, etc in less than 15 minutes. All I do is install a set of apps that (securely) shares my digital life between dives. The list includes the following:

Application		Description	Windows	Linux	iPhone
	RoboForm	Syncs web links, passwords, identities and form data amongst PCs and the iphone
	GoodSync	Syncs folders and remote locations, ideal for backing up remote ftp sites, etc
	Google Bookmarks	Syncs bookmarks across multiple browsers and PCs. All you need to do is install the Google Toolbar, authenticate, and voila!, your bookmarks appear in your browser.
	DropBox	Syncs documents  across PCs and the iphone. I also use dropbox to sync settings for apps that do not natively allow this ,for example ftp clients, etc.
	Google Docs	Google Docs are ideal for viewing or editing MS office docs without having MS Office installed. It is also great for accessing your docs when on someone else’s PC.
	Gmail	I use Gmail as my main mail, calendar and contact store, accessing it online and via Thunderbird and the iphone.  Searching for emails in your desktop mail client can take forever, with gmail you find it virtually instantly.
	Thunderbird	Thunderbird does email, calendaring and contacts. I use IMAP to connect it to my gmail account and it does the rest. Email signatures are synced across PCs by storing it in a dropbox subfolder.
	eWallet	Store and synchronize passwords and sensitive information across PCs and the iphone. Good security and auto sync feature makes this a great tool for storing all sorts of information.
	Tweetdeck	Access Twitter from PCs and iphone. Tweetdeck also syncs your search and notification settings amongst all your devices.

Now obviously when storing your life online security is a major consideration. There are some things I will never store online, like pin numbers ,etc. As to the rest, I make sure I use strong passwords and never re-use the same password for different applications and sites. Both RoboForm and eWallet contain good password generators that can be used.

As I do use Linux (Ubuntu) on a regular basis I have indicated which of these apps have Linux versions available.

There are other apps I use frequently like MS Office, VirtualBox, Photoshop, Pastel, etc, but as these are not online or synchronize their data between PCs I do not include them in the list.

One important piece of the puzzle that is still missing is an online billing, time and attendance and project management app. Although there are many out there I am still to find one with the feature set and price that I am happy with.

I know that online or cloud apps are purely web based, but in this context I am including apps that share their data across the cloud, as for me the true definition of the cloud is being free from any single PC to perform one’s work.

eBox Platform is a unified network server that offers easy and efficient computer network administration for SMBs. It can act as a Gateway, an Infrastructure Manager, a Unified Threat Manager, an Office Server, a Unified Communication Server or a combination of them. These functionalities are tightly integrated, automating most tasks, avoiding mistakes and saving time for system administrators.

I have a fairly complicated home network, which includes several desktops , a linux server, laptops, media centre, x-box, nintendo, wifi access point, wifi phones, etc. All of these gadgets connect to the internet for email and other connectivity based stuff.

To make matters worse, we also run a B&B on the same property, so have guest access into our home network via the Wifi access point (via WPA2 encryption).

Bandwith costs have been spiralling out of control, and it has become impossible to keep track of where it all goes. At the same time the growth in desktops / laptops meant that files and pictures were being duplicated all over the place, with no clear network sharing or backup structures. As we use a combination of windows, mac and linux it is real hard to share stuff reliably.

Then came eBox. I installed it from the ISO image onto a fairly old desktop pc with dual network cards. It essentially becomes the new gateway, sitting between the internal home network and the internet.  It comes with a transparent proxy so caches all thoses sites, images and files accessed from multiple computers.  It gives me clear reporting of what traffic is used where, and it keeps the Wifi users fro mthe B&B out of the private network.

I have now defined SMB based file shares for the various desktops to use, automated backups and print shares. Finally it is possible to print form the Mac to the printer on the windows.

Ebox comes with a easy to use GUI but I have dived into the linux side to set up some custom apps.  For one I have installed ntop for extra reporting. I have also added some custom rules to allow incoming traffic from outside into the network.

The next project is to connect the asterisk module in the ebox into my asterisk server in the office, allowing for integrated comms between the two.

Overall ebox is a great solution, coming with a comprehensive list of modules, and allows inexperienced admins to configure all these options. It also allows experts to log into the linux side and make manual configuration changes.

The new site uses lots more images and unfortunately the template is fairly bloated with icons, styles and scripts, but the overall load time should be manageable.

After burning lots of midnight oil the new site has finally gone live. Go visit the new Office Reliance website, then let me know what you think.