iptables with mark and counter support?
 

Hi Everyone,

I am trying to mark packets (eg mark all packets operating on a certain port) - this is no problem... What I would like to do is have some sort of counter attached to each mark type, so that I can poll on a regular interval (to create a graph)...

So in the end I could have graphs of data on port 80, and on port 25, etc :)

Any advice greatly appreciated.


Thanks,
Andrew

Check out the Netfilter extensions in Patch-O-Matic-Ng. I think there's a match and a target called "account" that will do that. ftp://ftp.netfilter.org/

I didn't use it because I have no purpose for it at the moment, but I remember reading about it.

Hi!

Thanks for the info :) - I'm going to try it this afternoon when I have a moment.

Cheers,
Andrew