From owner-freebsd-isp Wed Nov 24 11: 7:33 1999 Delivered-To: freebsd-isp@freebsd.org Received: from mail.toplink.net (mail.toplink.net [195.2.171.8]) by hub.freebsd.org (Postfix) with ESMTP id 0D73B14DF2 for ; Wed, 24 Nov 1999 11:07:29 -0800 (PST) (envelope-from ck@toplink.net) Received: from babylon.toplink.net (babylon.toplink.net [195.2.171.90]) by mail.toplink.net (8.9.3/8.9.3) with ESMTP id UAA14974; Wed, 24 Nov 1999 20:06:58 +0100 (CET) Received: from localhost (ck@localhost) by babylon.toplink.net (8.9.3/8.9.3) with ESMTP id UAA42814; Wed, 24 Nov 1999 20:06:50 +0100 (CET) Date: Wed, 24 Nov 1999 20:06:50 +0100 (CET) From: Christian Kratzer To: Tom Cc: Kurt Jaeger , "Jean M. Vandette" , freebsd-isp@FreeBSD.ORG Subject: Re: IP or packet Accounting Software for burst connections. In-Reply-To: Message-ID: X-NCC-RegID: de.toplink X-Spammer-Kill-Ratio: 75% X-Jihad: Will hunt down all cases of Spam and Net abuse. MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi, > > Basically, it will add up the bytes that match a given tcpdump expression, > > over a configurable interval. > > That seems rather silly, since ipfw can do that already. ipfw only counts bytes and packets. It does not log touples of (src ip,dst ip,byte count, packet count) which is what is required for full ip accounting. ipfw is basically the wrong tool for accounting ... Greetings Christian -- TopLink Internet Services GmbH ck@171.2.195.in-addr.arpa Christian Kratzer http://www.toplink.net/ Phone: +49 7032 2701-0 Fax: +49 7032 2701-19 FreeBSD spoken here! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message