Ok,

I have looked through performance monitor and there doesnt seems to be a way to monitor data transfer per month. There only seems to be bytes/sec which is basically useless in this case.

I do know that you can calculate usage based on logs, but it seems to be a rather long way around things(and recording current usage would require constant reanalyzing).

Does anyone know of a way to handle this? There seems to be no help from MS documentation.

Thanks in advance.. I hope :-)

MRTG should fix your problem.
http://people.ee.ethz.ch/~oetiker/webtools/mrtg/

Thanks Ju-87,

I have mrtg running on my test machine but there is little documentation(or perhaps I missed it?) on how to track multiple domains on one server. If there is a way I would assume that it has something to do with the "hosts" file on win2k but I added a second entry and it did not seem to work....

-EDIT-

After a bit more playing around, it seems as if I might be able to edit the mrtg.cfg file and have multiple files work....

however, once again there seems to be no way of figuring out the amount of data transfer used for say december, I suppose what I am looking for is somethign similar to mod-throttle (throttle-status) for windows...

Unless someone comes up with a "eureka" type idea, I suppose that I will just have to settle for looking up things via log anaylzers....

Are you looking to get traffic reports buy domain, IP, etc?

Originally posted by RackMy.com
Are you looking to get traffic reports buy domain, IP, etc?

I would be interested in something like that.

Me too, and per domain

I think I can get it done by domain (FTP & WEB), but don't think it's possible by IP address. Let me write out the procedure.

its expensive but this may be your solution:

http://download.cnet.com/downloads/0-10101-100-6745685.html?tag=st.dl.10001-103-1.lst-7-13.6745685

logs by IP address.

also i think the "Network Monitor" utility built into windows servers also has this functionality.

Interesting :) The only problem is if it's like "Network Monitor" the log files will be very large if you are doing any amount of traffic.

Yes...

The most useful report would seem to be monitoring data transfer by domain because you could compile the total(for the server) by simply adding it up. Of course this leaves out FTP transfer and mail, but I dont want to think of that until I get this first bit sorted out.

Rackmy, could you explain what the procedure you are working on would do(if not how it does it)?

I once used a free/open-source packet sniffer called Natas. It is mentioned here for example http://www.securiteam.com/tools/6R00B1P0BS.html

Now their website seems to be dead, hopefully just temporary. Since it is open-source and I am an old C/C++-programmer I am thinking of checking it out and maybe be able to modify it to filter out http/ftp traffic and updating a database/file splitted on host header as well.

Can anyone here access http://intex.ath.cx/natas.html or if someone has it already, please mail it to me and I will take a look

seattlite, the page has info on how to monitor lots of things (including virtual servers) using SNMP and MRG: http://www.wtcs.org/snmp4tpc/mrtg.htm

But with this solution: http://www.wn.com.au/psimmo/ lets you use MRTG to display PerformanceMonitor stats - and you can log your virtual server stats once again.

But I'm not sure if either solution would give FTP or email traffic.