[ILUG] Re: iptables byte/packet counters

[Rory Browne]

Sorry folks
I thought I'd deleted that email. I didn't mean to send it. After
spending the day headscratching, googling, yahooing, and RTFM-ing I
realised my problem about half-way through writing that email. I
though I'd pressed the delete button - obviously not....

I had a catch-all iptables rule ( iptables -A INPUT ), just for the
purpose of doing an (iptables -v) and getting the packet/byte count. I
found that the counters in the header line ( Chain INPUT ( x packets y
bytes ) ) didn't match what the byte/packet counter for the rule had
shown.

It turned out that I had iptables enabled for a while before adding
the rules, so traffic in this period was reflected in the header line,
but not of course in the rules that it would have applied to ( if the
rules had been in place in the time ).

Rory


On Jan 14, 2008 12:46 PM, Rory Browne <rbmlist at gmail.com> wrote:
> Hello everyone
>
> I haven't used iptables much, but I've recently started using it to
> monitor traffic.
>
> I checked it today and found different values for
>