lkml.org 
[lkml]   [1998]   [Jul]   [8]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
Subjectpromisc mode & accounting

Hello,

I have a Linux box that serves as traffic accounting server for our
network. Before today I was only measuring IP traffic on the network and
I did it by kernel IP accounting within 2.0.34 kernel and the NIC set to
promisc mode.

Now that I wanted to include the total local network traffic load to the
report on by using the fine extended interface statistics introduced by
the develpment kernel tree. But as I upgraded to the 2.1.108 kernel, set
up the ip chains and put the NIC to promisc mode, I was not longer able to
get the per protocol/host IP statistics from the input-chain firewall
filter used as accounting point. The interface input counters seem to be
doing fine. I found the following part of code from net/ipv4/ip_input.c,
ip_rcv function:

if (skb->pkt_type == PACKET_OTHERHOST)
goto drop;

So, I disabled it. Now SNMP IP packet counters seem to count IP packets
right, I think, but still the packets won't reach the accounting point in
input chain firewall.

Could anyone help me, please? I would like to know if I can somehow get
statistics on IP traffic which is actually not going through the machine
or will this functionality be supported in 2.1.x kernel or do I just have
to stay using 2.0.x kernel tree or write additional sniffer software to
do this. Could there for example be an optional accounting chain that
_all_ incoming IP packets will pass?

- Sampsa Ranta
sampsa@netsonic.fi


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu

\
 
 \ /
  Last update: 2005-03-22 13:43    [W:0.029 / U:0.060 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site