From owner-freebsd-isp  Wed Nov 24 20:40:45 1999
Delivered-To: freebsd-isp@freebsd.org
Received: from misery.sdf.com (misery.sdf.com [204.244.213.49])
	by hub.freebsd.org (Postfix) with ESMTP id 5085A14C85
	for <freebsd-isp@freebsd.org>; Wed, 24 Nov 1999 20:40:40 -0800 (PST)
	(envelope-from tom@sdf.com)
Received: from tom (helo=localhost)
	by misery.sdf.com with local-esmtp (Exim 2.12 #1)
	id 11qpBz-0004vY-00; Wed, 24 Nov 1999 19:03:31 -0800
Date: Wed, 24 Nov 1999 19:03:30 -0800 (PST)
From: Tom <tom@sdf.com>
To: Christian Kratzer <ck@toplink.net>
Cc: Kurt Jaeger <pi@complx.LF.net>,
	"Jean M. Vandette" <vandj@securenet.net>, freebsd-isp@FreeBSD.ORG
Subject: Re: IP or packet Accounting Software for burst connections.
In-Reply-To: <Pine.BSF.4.10.9911242004260.42718-100000@babylon.toplink.net>
Message-ID: <Pine.BSF.4.05.9911241902280.18907-100000@misery.sdf.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


On Wed, 24 Nov 1999, Christian Kratzer wrote:

> Hi,
> > > Basically, it will add up the bytes that match a given tcpdump expression,
> > > over a configurable interval.
> > 
> >   That seems rather silly, since ipfw can do that already.
> 
> ipfw only counts bytes and packets. It does not log touples of 
> (src ip,dst ip,byte count, packet count) which is what is required
> for full ip accounting.
> 
> ipfw is basically the wrong tool for accounting ...
> 
> Greetings
> Christian

  Yes, but you can specify the tuples that are significant.  I doubt that
anyone wants every possible combination.

Tom



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message