WSMon, a Web Server Monitor

WSMon is a set of patches allowing you to:

Monitor synthetic information (Timestamps, bytes transported, number of packets, IP source and destination addresses and ports) about HTTP sesssions whether using HTTP 0.9/1.0 or 1.1 (without pipelining) using IPFilter filtering module.
Report this information to an IPFIX compliant collector using the Vermont package.

Note that WSMon does not act as a proxy and does not depend on application level protocol exchanges analysis for HTTP sessions discovery. This allows WSMon to work significantly faster than most proxies.

In order to use this software you need the following software/hardware:

A Unix box supporting IPFilter (Preferably FreeBSD).
Two NICs.

This is experimental software. There are known bugs and certainly even many more yet unknown problems. This software has only been tested with FreeBSD 5.x for the IPFilter 3.4.x version and FreeBSD 6.x for the IPFilter 4.1.x version.

Use at your own risk.

Current version is 0.4.

Version for ipfilter 3.4.x
Version for ipfilter 4.1.x

Changes

07/05 : First public release.
09/05 : Corrected INSTALL file, Moved from Vermont 0.7 to 0.8.
09/06 : Now using LGPL vermont files. Switched to patches instead of providing full software. Merged export software with ipmon. Updated ipmon to take HTTP information into account. Corrected many bugs.
01/07 : Corrected a few bugs. Now running on ipfilter 4.1.x.

Related Publications

Olivier Paul, Jean Etienne Kiba, "Tradeoffs for Web Communications Fast Analysis", In proceedings of Fourth IFIP-TC6 Networking Conference, NETWORKING 2005, Lecture Notes in Computer Science, LNCS 3462, Springer-verlag. May 2005.
Jean Etienne Kiba, Olivier Paul, "Une technique de catégorisation rapide des requêtes HTTP", In proceedings of Fourth conference on Security and Network Architectures, SAR 2005, Batz sur mer, France, June 2005.
Olivier Paul, Jean Etienne Kiba, "RequIn, a tool for fast web traffic inference", In proceedings of 48th annual IEEE Global Telecommunications Conference, Globecom 2005, Saint Louis, MO, USA, November-December 2005.