From owner-freebsd-isp Thu Oct 2 02:44:34 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id CAA16556 for isp-outgoing; Thu, 2 Oct 1997 02:44:34 -0700 (PDT) Received: from news.skyinet.net (NEWS.SKYINET.NET [206.101.197.231]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id CAA16551 for ; Thu, 2 Oct 1997 02:44:30 -0700 (PDT) Received: from skyinet.net (NOC10.QZN.SKYINET.NET [206.101.197.10]) by news.skyinet.net (8.8.6/8.8.5) with ESMTP id RAA10752; Thu, 2 Oct 1997 17:44:22 +0800 (PST) Message-ID: <34336CF5.DE0900B@skyinet.net> Date: Thu, 02 Oct 1997 17:44:21 +0800 From: "Francis Percival C. Favoreal" Organization: SKYinternet X-Mailer: Mozilla 4.02 [en] (Win95; I) MIME-Version: 1.0 To: Steve Milliner , freebsd-isp@freebsd.org Subject: Re: packet counting References: <199710020803.SAA03640@russell.icis.qut.edu.au> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@freebsd.org X-Loop: FreeBSD.org Precedence: bulk Steve Milliner wrote: > "netstat -bins" gives me basically what I need > (I'm assuming here that I == in & O == out) That's affirmative. > It would be nice to distinguish between mail/http/telnet/etc > traffic though... Well for this one, I can suggest using ipfw with the approriate rules to match the ports, source, and destination of each packet that passes by the server. > - by the way, I don't suppose you know how to re-set the netstat > counters by any chance ? I know there is a way to do this but I cannot seem to remember it now :-) My suggestion is, maybe, these counters can be reset using a command "sysctl" which can manipulate kernel variables that I hope includes the interface counters. However, I do know that in ipfw, you could reset the counters for which again I am not sure wether counters for each rule or all the rules would be zeroed out once a reset is issued. I hope this helps. -- rick