From: Jan Humme <jan.humme@xs4all.nl>
To: Martin Tomasek <mtd@mk.cvut.cz>
Cc: netfilter@lists.samba.org
Subject: Re: advanced ip accounting
Date: Fri, 5 Jul 2002 13:00:09 +0200 [thread overview]
Message-ID: <02070513000901.14428@Lms> (raw)
In-Reply-To: <20020705074508.GB2006@mt.mk.cvut.cz>
On Friday 05 July 2002 09:45, Martin Tomasek wrote:
> Hello all,
>
> I'm looking for some accounting for netfilter, which should be used like
> this:
>
> iptables -A FORWARD -s 1.2.0.0/16 -j ACCOUNTING
>
> and which sends data to userspace periodically. It should collect
> protocol-ips-ports triplets, for which it will count bytes.
> I could't use -j ULOG or pcap because of big overhead -- I want to use
> it on gigabit router.
>
> Have you seen something like this?
How about using the "IP accounting" facility of iptables? Try:
#iptables -A FORWARD -s 1.2.0.0/16
i.e. without the -j option, to create a counter, and use
#iptables -L -v
to read out the results.
#iptables -Z
to reset.
You can make similar entries to count by service port.
Jan Humme.
next prev parent reply other threads:[~2002-07-05 11:00 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-07-05 7:45 advanced ip accounting Martin Tomasek
2002-07-05 11:00 ` Jan Humme [this message]
2002-07-05 11:06 ` Wiktor Wodecki
2002-07-05 11:46 ` Martin Tomasek
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=02070513000901.14428@Lms \
--to=jan.humme@xs4all.nl \
--cc=mtd@mk.cvut.cz \
--cc=netfilter@lists.samba.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox