From owner-freebsd-net@FreeBSD.ORG  Wed Jul  9 23:40:25 2003
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id C4D1937B407
	for <net@freebsd.org>; Wed,  9 Jul 2003 23:40:22 -0700 (PDT)
Received: from www.svzserv.kemerovo.su (www.svzserv.kemerovo.su
	[213.184.65.80])
	by mx1.FreeBSD.org (Postfix) with ESMTP id C46C443FD7
	for <net@freebsd.org>; Wed,  9 Jul 2003 23:40:20 -0700 (PDT)
	(envelope-from eugen@kuzbass.ru)
Received: from kuzbass.ru (kost [213.184.65.82])h6A6eHCo054368
	for <net@freebsd.org>; Thu, 10 Jul 2003 14:40:17 +0800 (KRAST)
	(envelope-from eugen@kuzbass.ru)
Message-ID: <3F0D0A4A.46C07679@kuzbass.ru>
Date: Thu, 10 Jul 2003 14:40:10 +0800
From: Eugene Grosbein <eugen@kuzbass.ru>
Organization: SVZServ
X-Mailer: Mozilla 4.8 [en] (Win98; U)
X-Accept-Language: ru,en
MIME-Version: 1.0
To: net@freebsd.org
References: <3F0BA58E.1F8888A2@kuzbass.ru>
	<20030709060958.GD69076@cell.sick.ru><3F0BE1E5.6010201@he.iki.fi>
	<20030709104614.GA4540@home.bluegrass.sk>
	<3F0CC9D9.80A1BD78@kuzbass.ru>
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 7bit
Subject: Re: unicast octets statistics
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Jul 2003 06:40:26 -0000

Eugene Grosbein wrote:
> 
> Milan Obuch wrote:
> 
> > > ifInOctets counts broadcasts too.
> > > I finished with ipfw2, thank you all.
> 
> > Maybe you could 'advertise' your solution :)
> 
> I use ipfw2 to count packets:
> 
> from any to any in recv ep0 mac $mymac any
> and
> from any to any out xmit ep0.

The second rule is incorrect for IPFW2, it counts packets twice.
It nust be replaced with
from any to any out xmit ep0 not layer2

Eugene