iptables accounting and promiscuous mode

iptables accounting and promiscuous mode

[Jakub Urban]

hi all

it's posible to use iptables for passive IP accounting on linux box with 
one NIC sets to promisc mode?
if yes - which version?
if no - is this feature plan to the future?

i cant't find any info in the docs, i only find patch for iptables-1.2.3 
on 
http://www.fokus.gmd.de/research/cc/glone/employees/sebastian.zander/private/netfilter.html 


thanks
jakub urban

Re: iptables accounting and promiscuous mode

[Rolf Wuerdemann]

Jakub Urban schrieb:
> 
> hi all

Hi Jakob ...
> 
> it's posible to use iptables for passive IP accounting on linux box with
> one NIC sets to promisc mode?
> if yes - which version?
> if no - is this feature plan to the future?

As far as i know it isn't possible to do nettfilter-based-accounting
with
an NIC in Promisc mode - it's based on the fact that you have to route 
packets to use netfilter (otherwise netfilter doesn't make sense ...)

On the other hand I've developed an Target for
netfilter-based-accounting
for our routers that is running stable since 2 1/2 Months, where 
I've permissions and will to release ;) (but I've to apply some patches
and to set up an cvs before)

If you want to get an "prerelease" - just mail me ;)

> 
> i cant't find any info in the docs, i only find patch for iptables-1.2.3
> on
> http://www.fokus.gmd.de/research/cc/glone/employees/sebastian.zander/private/netfilter.html
> 
> thanks
> jakub urban

regards

	Rolf Würdemann
	Wieske's Crew KG

PS: perhaps I'll should set myself an "dead-line" to release, so it will
released
sometimes (and not in 23 years ;)