Marin D wrote:

> Does someone know the purpose of all the fields in /proc/net/ip_acct ?
> Most of them are obvious but some are still mystery for me.
> 
> Now I have something like:
> 
> IP accounting rules
> 00000000/00000000->D42403F9/FFFFFFFF ppp0 00000000 41 0 1 3184       588167     25 0 
>0 0 0 0 0 0 0 0 AFF X00
> 00000000/00000000->D42403F9/FFFFFFFF ppp0 00000000 42 0 1 576        62367      53 0 
>0 0 0 0 0 0 0 0 AFF X00
> ^^^^^                                ^^^^          ^^       ^^       ^^^^^
> src_addr/mask - dest_addr/mask      iface  ???? proto+flags ? ? packets bytes port 
>?????????????????????????????????   

UTSL!

>From net/ipv4/ip_fw.c:

                len+=sprintf(buffer+len,"%08lX/%08lX->%08lX/%08lX %.16s %08lX %X ",
                        ntohl(i->fw_src.s_addr),ntohl(i->fw_smsk.s_addr),
                        ntohl(i->fw_dst.s_addr),ntohl(i->fw_dmsk.s_addr),
                        (i->fw_vianame)[0] ? i->fw_vianame : "-",
                        ntohl(i->fw_via.s_addr),i->fw_flg);
                len+=sprintf(buffer+len,"%u %u %-10lu %-10lu",
                        i->fw_nsp,i->fw_ndp, i->fw_pcnt,i->fw_bcnt);
                for (p = 0; p < IP_FW_MAX_PORTS; p++)
                        len+=sprintf(buffer+len, " %u", i->fw_pts[p]);
                len+=sprintf(buffer+len, " A%02X X%02X", i->fw_tosand, i->fw_tosxor);
                buffer[len++]='\n';
                buffer[len]='\0';

IOW:

src_addr/mask -> dst_addr/mask if_name if_addr flags #src_ports #dst_ports #packets 
#bytes ports(10) TOS_and TOS_xor

-- 
Glynn Clements <[EMAIL PROTECTED]>

Reply via email to