From: Vadim Kochan <[email protected]> Add some explanation about traffic counters enabling via sysctl and its limitation.
Signed-off-by: Vadim Kochan <[email protected]> --- flowtop.8 | 19 ++++++++++++++++++- 1 file changed, 18 insertions(+), 1 deletion(-) diff --git a/flowtop.8 b/flowtop.8 index c850f12..f059e15 100644 --- a/flowtop.8 +++ b/flowtop.8 @@ -35,6 +35,7 @@ The following information will be presented in flowtop's output: * Used protocols (IPv4, IPv6, TCP, UDP, SCTP, ICMP, ...) * Flow port's service name heuristic * Transport protocol state machine information + * Bytes/packets counters (if they are enabled) .PP In order for flowtop to work, netfilter must be active and running on your machine, thus kernel-side connection tracking is active. If netfilter @@ -47,6 +48,19 @@ iptables -A OUTPUT -p tcp -m state --state NEW,ESTABLISHED -j ACCEPT .in -4 .PP +To dump bytes/packets counters flowtop enables sysctl(8) parameter via: +.in +4 +.sp +echo 1 > /proc/sys/net/netfilter/nf_conntrack_acct +.sp +.in -4 +and resets it on exit. But these counters will take effect only on connections +which were created after accounting was enabled, so to have these counters to +be active all the time the sysctl(8) parameter should be enabled after system +is up. To make it automatically enabled the sysctl.conf(8) and sysctl.d(8) +might be used. + +.PP flowtop's intention is just to get a quick look over your active connections. If you want logging support, have a look at netfilter's conntrack(8) tools instead. @@ -134,7 +148,10 @@ Borkmann <[email protected]>. .BR bpfc (8), .BR astraceroute (8), .BR curvetun (8), -.BR iptables (8) +.BR iptables (8), +.BR sysctl (8), +.BR sysctl.conf (8), +.BR sysctl.d (8) .PP .SH AUTHOR Manpage was written by Daniel Borkmann. -- 2.4.2 -- You received this message because you are subscribed to the Google Groups "netsniff-ng" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
