Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 02 Aug 2004 09:17:48 +1000
From:      Gregory Bond <gnb@itga.com.au>
To:        dawnshade <h-k@mail.ru>
Cc:        freebsd-ipfw@freebsd.org
Subject:   Re: strange behaivor ipfw2 counters 
Message-ID:  <200408012317.JAA27513@lightning.itga.com.au>
In-Reply-To: Your message of Fri, 30 Jul 2004 11:41:17 %2B0400.

next in thread | raw e-mail | index | archive | help

h-k@mail.ru said:
>  
>
>00001     5900     1623729 count ip from any to any in recv cp1
>00002      130        9768 count ip from any to any out xmit cp1
>
>cp1 - external interface, no nat, route real IP adresses.
>When i download via http from this router counter 2 increasing, but when
>download from client behind this router via ftp counter 2 increasing, but
>_very_ small. 

In rule 2, you are counting bytes back out to the internet.  For an FTP 
download, this will only be the ACK packets - a very tiny amount.  Perhaps you 
meant "out fxp1" instead?

> P.S. Sorry for terrible English. 

Your English is far better than our Russian!




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200408012317.JAA27513>