On 10 Apr 2002, Martin Josefsson wrote: > There is partital support for this in the ctnetlink patch. > together with a program called ctrace you can monitor the creation and > ending of connections. It doesn't have support for bytes/packets out of > the box but there's a patch that adds that. I don't know exactly what it > can report as I havn't used ctnetlink for that, I've only tested it > briefly and saw that it reported stuff :) >
The ctnetlink patch has been integrated into a more general nfnetlink patch, nfnetlink provides the same functionallity as ctnetlink and more. In the latest version of ctnetlink packet and byte statistics are kept on a per tuple basis. Basically all the information in the ip_conntrack kernel structure is available to the user through ctnetlink. J.
