2

I know that iptables keeps accounting information for ip traffic blocked or passed. However, it appears that when using ipsets with iptables, the accounting information is aggregated for the entire set. Is there any way of finding accounting information for individual entries in an ipset being used by iptables?

|improve this question
1

you can use ULOG as a target and log the packets by it. Feeding mySQL/Postgres by ulogd is easy and then you can create such accounting info as you wish.

|improve this answer
  • Thanks. I'd turned that up in a google search. Was hoping there was a way to do it which didn't involve anything beyond the kernel and iptables. – sheetzam Oct 24 '13 at 20:05
0

I have learned ipset after 6.19 include the accounting information I was looking for, according to http://marc.info/?l=netfilter&m=138289610522990

|improve this answer
  • Do you have any example how to use it? – Almog Baku Aug 8 '15 at 20:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.