From owner-freebsd-questions Mon May 31 0:42:50 1999 Delivered-To: freebsd-questions@freebsd.org Received: from mail.island.net.au (mail.island.net.au [203.28.142.3]) by hub.freebsd.org (Postfix) with ESMTP id 962F2151F3 for ; Mon, 31 May 1999 00:42:46 -0700 (PDT) (envelope-from hugh@island.net.au) Received: from solo (solo.island.net.au [203.28.142.5]) by mail.island.net.au (8.8.5/8.8.5) with SMTP id RAA17270 for ; Mon, 31 May 1999 17:42:44 +1000 (EST) Message-Id: <3.0.6.32.19990531174119.007f3ac0@mail.island.net.au> X-Sender: hugh@mail.island.net.au X-Mailer: QUALCOMM Windows Eudora Light Version 3.0.6 (32) Date: Mon, 31 May 1999 17:41:19 +1000 To: questions@freebsd.org From: Hugh Blandford Subject: Re: IPFW and byte counting on multiple interfaces In-Reply-To: <3.0.6.32.19990531155049.008c8410@mail.island.net.au> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hi, should have mentioned earlier that I have tried the following rule and seem to be getting twice as many bytes counted for both in and out than I would expect: 00050 1624 135892 count ip from any to any in recv de0 00060 1766 1830454 count ip from any to any out xmit de0 I have also tried using not and their internal network number and it still doesn't seem to make any difference. Thanks, Hugh At 15:50 31/05/99 +1000, you wrote: >Hi, > >I am trying to use IPFW to count the number of bytes that are received and transmitted from a particular interface. One interface is connected to an internal network using a private address range 192.168.x.x and natd, the other interface is connected to the net. > >The machine is running proxy and mail etc and internally people are using ICQ etc etc. I need a way to count the bytes that come from and go to, the outside world. I don't want to catch any proxy hit traffic or anything like that. > >I'm assuming that the only way I can do that is to put the counters prior to the address translation in the firewall. Is this correct? What syntax for the ipfw entry should I use? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message