[pmacct-discussion] pmacct measures less traffic than ethereal does

Hello, I use pmacct 0.11.1 under FreeBSD 6.1 with a PostgreSQL Database. Everything works at first sight. But if I compare the traffic (the bytes), pmacct writes in my Database, it differs from what ethereal shows under Statistics - Conversations - IPv4. Pmaccts data is always less than that what

Re: [pmacct-discussion] pmacct measures less traffic than ethereal does

Hi Sebastian, a couple of things come to my mind - let me know if you have any joy with them: - Ethereal could be counting packet sizes differently compared to pmacct. pmacct counts IPv4/6 header's length plus the payload. ie.m L2 and ethernet-related stuff are excluded. If this is the case,