From: Vadim Kochan <[email protected]>

Add some explanation about traffic counters enabling via
sysctl and its limitation.

Signed-off-by: Vadim Kochan <[email protected]>
---
 flowtop.8 | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/flowtop.8 b/flowtop.8
index c850f12..f059e15 100644
--- a/flowtop.8
+++ b/flowtop.8
@@ -35,6 +35,7 @@ The following information will be presented in flowtop's 
output:
     * Used protocols (IPv4, IPv6, TCP, UDP, SCTP, ICMP, ...)
     * Flow port's service name heuristic
     * Transport protocol state machine information
+    * Bytes/packets counters (if they are enabled)
 .PP
 In order for flowtop to work, netfilter must be active and running
 on your machine, thus kernel-side connection tracking is active. If netfilter
@@ -47,6 +48,19 @@ iptables -A OUTPUT -p tcp -m state --state NEW,ESTABLISHED 
-j ACCEPT
 .in -4
 
 .PP
+To dump bytes/packets counters flowtop enables sysctl(8) parameter via:
+.in +4
+.sp
+echo 1 > /proc/sys/net/netfilter/nf_conntrack_acct
+.sp
+.in -4
+and resets it on exit. But these counters will take effect only on connections
+which were created after accounting was enabled, so to have these counters to
+be active all the time the sysctl(8) parameter should be enabled after system
+is up. To make it automatically enabled the sysctl.conf(8) and sysctl.d(8)
+might be used.
+
+.PP
 flowtop's intention is just to get a quick look over your active connections.
 If you want logging support, have a look at netfilter's conntrack(8) tools
 instead.
@@ -134,7 +148,10 @@ Borkmann <[email protected]>.
 .BR bpfc (8),
 .BR astraceroute (8),
 .BR curvetun (8),
-.BR iptables (8)
+.BR iptables (8),
+.BR sysctl (8),
+.BR sysctl.conf (8),
+.BR sysctl.d (8)
 .PP
 .SH AUTHOR
 Manpage was written by Daniel Borkmann.
-- 
2.4.2

-- 
You received this message because you are subscribed to the Google Groups 
"netsniff-ng" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to