From owner-freebsd-questions@FreeBSD.ORG Thu May 20 10:37:33 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 632DD16A4CE for ; Thu, 20 May 2004 10:37:33 -0700 (PDT) Received: from out2.smtp.messagingengine.com (out2.smtp.messagingengine.com [66.111.4.26]) by mx1.FreeBSD.org (Postfix) with ESMTP id F03CD43D45 for ; Thu, 20 May 2004 10:37:31 -0700 (PDT) (envelope-from nkinkade@fastmail.fm) X-Sasl-enc: Wik70MPPsPB8/i5FvhgdLg 1085074645 Received: from gentoo-npk.bmp.ub (unknown [206.27.244.136]) by www.fastmail.fm (Postfix) with ESMTP id 4A2DBBAE1B7 for ; Thu, 20 May 2004 13:37:24 -0400 (EDT) Received: from nkinkade by gentoo-npk.bmp.ub with local (Exim 4.21) id 1BQrG1-00026y-Sj for freebsd-questions@freebsd.org; Thu, 20 May 2004 11:23:01 -0600 Date: Thu, 20 May 2004 11:23:01 -0600 From: Nathan Kinkade To: freebsd-questions@freebsd.org Message-ID: <20040520172301.GB3534@gentoo-npk.bmp.ub> Mail-Followup-To: freebsd-questions@freebsd.org Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="qrxaW5QmeXhOrNsF" Content-Disposition: inline User-Agent: Mutt/1.5.6i Sender: Subject: netstat output - diff between 'link' and 'inet' counters X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Nathan Kinkade List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 May 2004 17:37:33 -0000 --qrxaW5QmeXhOrNsF Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable I delved into trying to determine the cause of an unreasonably high number of Ierrs on a few FreeBSD routers we have setup on campus. While probing through the netstat output on the machines I realized that I don't understand the exact difference between the 'inet' and 'link' protocol families. Now, I understand the difference between IP and ethernet, but the byte and packet counts for 'inet' and 'link' don't seem to match what I would expect for those protocols, respectively. This tells me that the numbers being logged must differ from my expectations. Generally I notice that the 'inet' counts for an interface are a relatively small fraction of that for the 'link' counts for the same interface. However, on our main FreeBSD router that provides NAT and access to the internet the numbers are somewhat reversed, with 'inet' counts being much higher than the 'link' counts. Is there someone who can explain to me exactly what packet and byte counts actually represent for the 'inet' and 'link' families? Thanks, Nathan --=20 gpg --keyserver pgp.mit.edu --recv-keys D8527E49 --qrxaW5QmeXhOrNsF Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFArOl1O0ZIEthSfkkRAuHKAKCB/TjWzBfZ9KmQIKj3d9zUDnoRtgCfXTVp HCcbzEBfYxxqlOJ5FDtPLCU= =RXdI -----END PGP SIGNATURE----- --qrxaW5QmeXhOrNsF--