I have following set up :
a machine with a public IP with several machines with static IP behind it (NAT).
How would I monitor the traffic they generate on a per IP basis (the LAN ip to which traffic gets forwarded) ?
I think you can use some netflow sensor (for example fprobe, ipcad) and then export it to some collector. I used UTM5, but it's paid. I think there should be some free netflow collectors. For momentary snapshot of traffic you can use iftop.
If your gateway box is running Linux, you could use an
You'd then have to configure your