From owner-freebsd-questions@FreeBSD.ORG Wed Jul 16 20:11:01 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 864B337B401 for ; Wed, 16 Jul 2003 20:11:01 -0700 (PDT) Received: from mx1.au.itouchnet.net (nat2.au.itouchnet.net [144.135.23.100]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8055143FA3 for ; Wed, 16 Jul 2003 20:11:00 -0700 (PDT) (envelope-from ajthomson@optushome.com.au) Received: from nobody by mx1.au.itouchnet.net with scanned_ok (Exim 3.36 #1) id 19czAW-0005lO-00 for freebsd-questions@freebsd.org; Thu, 17 Jul 2003 13:10:56 +1000 X-TLS: TLSv1:DES-CBC3-SHA:168 athomson.prv.au.itouchnet.net -> mx1.au.itouchnet.net Received: from athomson.prv.au.itouchnet.net ([192.168.13.55]) by mx1.au.itouchnet.net with esmtp (TLSv1:DES-CBC3-SHA:168) (Exim 3.36 #1) id 19czAW-0005lH-00 for freebsd-questions@freebsd.org; Thu, 17 Jul 2003 13:10:56 +1000 From: Andrew Thomson To: freebsd-questions@freebsd.org Content-Type: text/plain Message-Id: <1058411456.73748.12.camel@athomson.prv.au.itouchnet.net> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.4.3 Date: 17 Jul 2003 13:10:56 +1000 Content-Transfer-Encoding: 7bit X-Checked: Scanned for any viruses and unauthorized attachments at mx1.au.itouchnet.net X-iScan-ID: 22154-1058411456-04178@mx1.au.itouchnet.net version $Name: REL_2_0_2 $ Subject: using trafd X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jul 2003 03:11:01 -0000 Requesting some assistance using trafd. I have it running on my ethernet and running trafdump/trafshow sporadically. >From what I've read the best thing to do is something like this: 59 * * * * trafdump 59 23 * * * trafsave 0 0 * * * traflog > daily_traffic_log anyway, just shooting for the general theory here.. just been mucking around with it so far on my desktop and am curious about the following fields too.. (fxp0) athomson at Jul 17 13:02:36 - Jul 17 13:09:15 Summary: 80950 data bytes, 100678 all bytes, 11 records From Port To Port Proto Data All What's the difference between "data bytes" and "all bytes" thanks, ajt.