From owner-freebsd-net@FreeBSD.ORG  Tue Feb 24 06:47:47 2004
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 73F0D16A4CE
	for <freebsd-net@freebsd.org>; Tue, 24 Feb 2004 06:47:47 -0800 (PST)
Received: from cell.sick.ru (cell.sick.ru [217.72.144.68])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 9151C43D1D
	for <freebsd-net@freebsd.org>; Tue, 24 Feb 2004 06:47:46 -0800 (PST)
	(envelope-from glebius@cell.sick.ru)
Received: from cell.sick.ru (glebius@localhost [127.0.0.1])
	by cell.sick.ru (8.12.9/8.12.8) with ESMTP id i1OElhQE079498
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Tue, 24 Feb 2004 17:47:44 +0300 (MSK)
	(envelope-from glebius@cell.sick.ru)
Received: (from glebius@localhost)
	by cell.sick.ru (8.12.9/8.12.6/Submit) id i1OElh8H079497;
	Tue, 24 Feb 2004 17:47:43 +0300 (MSK)
Date: Tue, 24 Feb 2004 17:47:43 +0300
From: Gleb Smirnoff <glebius@cell.sick.ru>
To: Andre Rein <ar@g23.org>
Message-ID: <20040224144743.GA79478@cell.sick.ru>
Mail-Followup-To: Gleb Smirnoff <glebius@cell.sick.ru>,
	Andre Rein <ar@g23.org>, freebsd-net@freebsd.org
References: <20040224152136.S97179@juergen.edv-winter.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=koi8-r
Content-Disposition: inline
In-Reply-To: <20040224152136.S97179@juergen.edv-winter.de>
User-Agent: Mutt/1.5.6i
cc: freebsd-net@freebsd.org
Subject: Re: different traffic accounting trafd vs. ipcad
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Feb 2004 14:47:47 -0000

  Dear Andre,

On Tue, Feb 24, 2004 at 03:42:38PM +0100, Andre Rein wrote:
A> I'm running two different accounting programs at the firewall (ipcad &
A> trafd) and it looks like that trafd doesn't account the whole traffic,
A> because the sum of the individual tcp/udp/icmp traffic doesn't match the
A> ipcad accounting.
A> 

  trafd itself is very buggy. I'd better do not trust
its data. Use ipcad, ipacct or ng_ipacct. trafd'd bugginess was discussed a
lot in different russian-speaking mailinglists.

-- 
Totus tuus, Glebius.
GLEBIUS-RIPN GLEB-RIPE