Hi, I am currently trying to set up pmacct to account traffic between my host and the internet.
I account src and dst hosts without any filtering. aggregate[out]: dst_host,src_host aggregate[in]: dst_host,src_host Looking at the results i wondered how pmacct does divide between inbound and outbound traffic? My IN socket shows many connections from my IP to the internet. pmacct -s -p /var/pmacct_in.pipe SRC_IP DST_IP PACKETS BYTES 77.87.228.36 88.198.192.157 5 377 <- !! 88.198.192.157 67.195.37.185 2 364 213.23.32.254 88.198.192.157 2 158 88.198.192.157 194.25.0.68 1 202 <- !! 88.198.192.157 195.50.140.12 5 989 <- !! [...] 88.198.192.157 is my IP. But it seems pretty confusing to me that I have INCOMING traffic on my host whith an DST_IP in the internet. How is this possible? May it be possible that my ip-tables NAT routing on that Host affects the traffic accounting? I just want to have traffic from 88.198.192.157 and to 88.198.192.157 accounted, an suggestions how to do that? thanks a lot! Dennis Kempin _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
