From owner-freebsd-isp Fri May 19 9:15:35 2000 Delivered-To: freebsd-isp@freebsd.org Received: from hindenburg.eboai.org (hindenburg.eboai.org [205.181.254.190]) by hub.freebsd.org (Postfix) with ESMTP id B74E837B7BB for ; Fri, 19 May 2000 09:15:32 -0700 (PDT) (envelope-from chip@chocobo.cx) Received: by hindenburg.eboai.org (Postfix, from userid 1000) id 39FAA3D56; Fri, 19 May 2000 12:15:31 -0400 (EDT) Date: Fri, 19 May 2000 12:15:31 -0400 From: Chip Marshall To: "D. W. Piper" Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Interface alias accounting? Message-ID: <20000519121531.A73613@setzer.chocobo.cx> Reply-To: chip@chocobo.cx References: <00bb01bfc1ab$b141a160$213cd3cf@loop.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.1.4i In-Reply-To: <00bb01bfc1ab$b141a160$213cd3cf@loop.com>; from dwplists@loop.com on Fri, May 19, 2000 at 09:02:50AM -0700 X-URL: http://www.chocobo.cx/chip/ X-OS: FreeBSD 3.4-RELEASE i386 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On May 19, 2000, D. W. Piper sent me the following: > Thank you to everyone who replied. :) > > I'm afraid I'm still a bit confused though. I thought I'd recently seen > mention here of a relatively simple method that would allow netstat to > show the specific packet counts for each IP address assigned to the > interface, as opposed to showing the interface total for them all. > > Maybe it was wishful thinking though. :) I'm not sure if someone else already mentioned this, but you could setup ipfw rules for each of the IP addresses you wanted to watch, something along the lines of: 00100 count ip from any to 205.181.254.163 via de0 00200 count ip from 205.181.254.163 to any via de0 so that when you do an ipfw show, it will show the following: 00100 4 350 count ip from any to 205.181.254.163 via de0 00200 5 414 count ip from 205.181.254.163 to any via de0 Where the second column is the number of packets, and the third is the number of bytes. The first rule shows incoming, and the second should outgoing. -- Chip Marshall http://www.chocobo.cx/chip/ Finger for PGP GCM/CS d+(-) s+:++ a18>? C++ UB++++$ P+++$ L- E--- W++ N+@ o K- w O M+ V-- PS PE Y? PGP++ t+@ 5 X R>+ tv+() b++>+++ DI++++ D(-) G++ e>++ h!>++ r-- y- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message