*BSD News Article 66933


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!news.cs.su.oz.au!inferno.mpx.com.au!news.unimelb.EDU.AU!munnari.OZ.AU!news.ecn.uoknor.edu!qns3.qns.com!imci4!newsfeed.internetmci.com!iol!tank.news.pipex.net!pipex!dispatch.news.demon.net!demon!arg1.demon.co.uk
From: Andrew Gordon <andrew.gordon@net-tel.co.uk>
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: FreeBSD and network accounting
Date: Wed, 24 Apr 1996 12:23:09 GMT
Lines: 8
Message-ID: <830348589.3000@arg1.demon.co.uk>
References: <4lgfmj$n64@narses.hrz.tu-chemnitz.de> <4ljd8j$ng0@uriah.heep.sax.de> <Pine.LNX.3.92.960424084114.105B-100000@benjy.csn.tu-chemnitz.de>
NNTP-Posting-Host: arg1.demon.co.uk
X-NNTP-Posting-Host: arg1.demon.co.uk
X-Mailer: Mozilla 1.1N (X11; I; FreeBSD 2.1-STABLE i386)
MIME-Version: 1.0
X-URL: news:Pine.LNX.3.92.960424084114.105B-100000@benjy.csn.tu-chemnitz.de
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=us-ascii

Michael Hasenstein <mha@informatik.tu-chemnitz.de> wrote:
>tcpdump is also useless, since it puts a device into promiscous mode,
>which makes the accounting files far too big. I can tell nacctd to only
>count packets that go through the router.

What's wrong with the "-p" option to tcpdump?