I have a Linux box that serves as traffic accounting server for our
network. Before today I was only measuring IP traffic on the network and
I did it by kernel IP accounting within 2.0.34 kernel and the NIC set to
promisc mode.
Now that I wanted to include the total local network traffic load to the
report on by using the fine extended interface statistics introduced by
the develpment kernel tree. But as I upgraded to the 2.1.108 kernel, set
up the ip chains and put the NIC to promisc mode, I was not longer able to
get the per protocol/host IP statistics from the input-chain firewall
filter used as accounting point. The interface input counters seem to be
doing fine. I found the following part of code from net/ipv4/ip_input.c,
ip_rcv function:
if (skb->pkt_type == PACKET_OTHERHOST)
goto drop;
So, I disabled it. Now SNMP IP packet counters seem to count IP packets
right, I think, but still the packets won't reach the accounting point in
input chain firewall.
Could anyone help me, please? I would like to know if I can somehow get
statistics on IP traffic which is actually not going through the machine
or will this functionality be supported in 2.1.x kernel or do I just have
to stay using 2.0.x kernel tree or write additional sniffer software to
do this. Could there for example be an optional accounting chain that
_all_ incoming IP packets will pass?
- Sampsa Ranta
sampsa@netsonic.fi
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu