From owner-freebsd-questions@FreeBSD.ORG  Thu Sep 11 07:56:44 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 57DA116A4BF
	for <freebsd-questions@freebsd.org>;
	Thu, 11 Sep 2003 07:56:44 -0700 (PDT)
Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 084D743F93
	for <freebsd-questions@freebsd.org>;
	Thu, 11 Sep 2003 07:56:43 -0700 (PDT)
	(envelope-from fgleiser@cactus.fi.uba.ar)
Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108])
	by cactus.fi.uba.ar (8.12.3/8.12.3) with ESMTP id h8BErRRJ058086;
	Thu, 11 Sep 2003 11:53:27 -0300 (ART)
	(envelope-from fgleiser@cactus.fi.uba.ar)
Date: Thu, 11 Sep 2003 11:53:26 -0300 (ART)
From: Fernando Gleiser <fgleiser@cactus.fi.uba.ar>
To: bsd@perimeter.co.za
In-Reply-To: <courier.3F607606.00005FE3@perimeter.co.za>
Message-ID: <20030911115059.M57949-100000@cactus.fi.uba.ar>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Spam-Status: No, hits=-119.5 required=5.0
	tests=EMAIL_ATTRIBUTION,IN_REP_TO,QUOTED_EMAIL_TEXT,
	      REPLY_WITH_QUOTES,USER_IN_WHITELIST
	version=2.53
X-Spam-Checker-Version: SpamAssassin 2.53 (1.174.2.15-2003-03-30-exp)
cc: FreeBSD Question List <freebsd-questions@freebsd.org>
Subject: Re: IPMON Format ???
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Sep 2003 14:56:44 -0000

On Thu, 11 Sep 2003 bsd@perimeter.co.za wrote:

> ===========================
> Sep 11 14:52:46 fox ipmon[47]: 14:52:45.248487 2x ed1 @0:3 P
> 196.23.158.10,25 -> 196.22.178.91,26704 PR tcp len 20 40 -A K-S
> OUT
> ===========================
>
> I have been able to figure out what it all means by reference to "man
> ipmon", except for the following two things:
>
> 1) the "2x" before the interface name (ed1).

It means the number of times that line was repeated. Instead of writing
two identical lines, it writes 2x. If there were three, it'd say 3x and
so on

> 2) the "K-S" right near the end of the line, before "OUT".

"keep state" IIRC


			Fer