Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 21 Feb 2005 03:22:03 +0900 (JST)
From:      Tod McQuillin <devin@spamcop.net>
To:        freebsd-stable@freebsd.org
Subject:   Help me understand netstat output
Message-ID:  <20050221031739.G684@plexi.pun-pun.prv>

next in thread | raw e-mail | index | archive | help

On a 5.3-STABLE system (and actually for the past few years on FreeBSD 4.x 
and 5.x), 'netstat -in' has show numbers like this:

Name    Mtu Network       Address              Ipkts Ierrs    Opkts Oerrs  Coll
xl0    1500 <Link#1>      00:04:76:5f:45:1f   622543     0   621123     0     0
xl0    1500 192.168.7     192.168.7.28        622208     -  2110040     -     -
lo0   16384 <Link#3>                             169     0      169     0     0
lo0   16384 127           127.0.0.1              169     -      169     -     -
wi0*   1500 <Link#4>      00:02:2d:29:28:7f        0     0        0     0     0

Why does the second line for xl0 show so many more outgoing packets than 
the first line?

It seems to me the first line (Link#1) should count all packets at OSI 
layer 2, and the second should count layer 3 (IP) packets.  I can see the 
layer 2 count being bigger than layer 3 count (lots of arp or other 
ether-only traffic) but not the other way around.

Anyone know the explanation for this?
-- 
Tod McQuillin



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050221031739.G684>