Hi, Peter Surda schrieb: > On Sat, 04 Jun 2005 14:45:30 +0200 Carl-Daniel Hailfinger > >>Since the accounting is done with ipt_ACCOUNT right now and the >>netfilter framework obviously can't know whether a packet was >>dropped because the queue was full, dropped packets are counted as >>traffic, but that is somewhat unfair. > > I did some tests about a year ago and arrived to the conclusion that this > difference can be ignored for practical purposes (~2%).
I know that it can be ignored most of the time, but certain types of communication using UDP packets don't adjust their rates like a TCP connection would. One pathological case was >70% dropped packets and the netfilter counters were complete garbage. Regards, Carl-Daniel -- http://www.hailfinger.org/ _______________________________________________ LARTC mailing list [email protected] http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
