[H-GEN] IP Traffic Stats

[Robert Brockway]

On Sat, 5 Jun 2004, Tim Kent wrote:

> I've used 'ipac' (it's a Debian package) and it just creates some
> ipchains/iptables rules that it uses as counters, so I would say that it
> would be fairly inaccurate but gives a ballpark number.  SNMP would

If the aim is to measure the packets passing through the firewall/router
an ipchains/iptables counter should be perfectly accurate.  There were
issues a long time ago in earlier Linux packer accounting implementations
(ipfw dating from the early-mid 90s) but not for many years afaik.

> This can be done fairly easily in BSD, but (last time I checked) Linux
> will require some kernel patches.  I've gotten it working before but I

Not a kernel patch but a kernel module.  The module may even be included
in recent stable kernels (2.6 maybe?).  I've never played with it but it
is now part of the mainstream netfilter code afaik.

Cheers,
	Rob

-- 
Robert Brockway B.Sc. email: robert at timetraveller.org, rbrockway at uqconnect.net
Linux counter project ID #16440 (http://counter.li.org)
"The earth is but one country and mankind its citizens" -Baha'u'llah