From owner-freebsd-questions@FreeBSD.ORG Wed Jul 23 13:10:05 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 589DE106566B for ; Wed, 23 Jul 2008 13:10:05 +0000 (UTC) (envelope-from freebsd-questions@m.gmane.org) Received: from ciao.gmane.org (main.gmane.org [80.91.229.2]) by mx1.freebsd.org (Postfix) with ESMTP id 2737B8FC1E for ; Wed, 23 Jul 2008 13:10:04 +0000 (UTC) (envelope-from freebsd-questions@m.gmane.org) Received: from list by ciao.gmane.org with local (Exim 4.43) id 1KLe6T-000703-4W for freebsd-questions@freebsd.org; Wed, 23 Jul 2008 13:10:01 +0000 Received: from utwig.xim.bz ([195.184.197.130]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 23 Jul 2008 13:10:01 +0000 Received: from c.kworr by utwig.xim.bz with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 23 Jul 2008 13:10:01 +0000 X-Injected-Via-Gmane: http://gmane.org/ To: freebsd-questions@freebsd.org From: Volodymyr Kostyrko Date: Wed, 23 Jul 2008 16:09:53 +0300 Lines: 12 Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: utwig.xim.bz User-Agent: Mozilla/5.0 (X11; U; FreeBSD amd64; ru-RU; rv:1.8.1.16) Gecko/20080718 SeaMonkey/1.1.11 Sender: news Subject: ng_netflow question X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Jul 2008 13:10:05 -0000 Hi there. I'm stuck with splitting input and output traffic. I can't use srcaddr/dstaddr as the machine generating traffic gets dynamic ip's. I'm thinking of using input/output for that purpose, but it's not clearly stated how this parameters are populated. I.e. for outbound connection we got input=0 and output=ifX but for inbound connections input=output=ifX. Am I missing something here? Should the outbound connections get output=0? -- Sphinx of black quartz judge my vow.