Re: related to -z option

[Daniel Chemko <dchemko@xxxxxxxxxx>]

If you have an accouting tool which doesn't handle accumulative 
statistics gathering, you will have to zero the counters right after the 
probe. Not ideal, but a hack to make some acocunting packages work.

Eg:
I probe an ipables rule ever 5 min.


Minute 0
   iptables -Z
   iptables -nvxL | grep ... | awk '{print $2}'
   5345
   iptables -Z
Minute 5
   iptables -nvxL | grep ... | awk '{print $2}'
   5454
   iptables -Z
Accounting with a non-acumulative counter == 5345,5454
Accounting with an acumulative counter == 5345,109 (wrong)


Minute 0
   iptables -Z
   iptables -nvxL | grep ... | awk '{print $2}'
   5345
Minute 5
   iptables -nvxL | grep ... | awk '{print $2}'
   10799
Accounting with a non-acumulative counter == 5345,10799 (wrong)
Accounting with an acumulative counter == 5345,5454


rohit persaie wrote:

> Dear All,
>
> There is one option in iptables .....-Z , used for  the  packet  and 
> byte counters in all the chains.
>
> Please tell me the use of this option, with example.
>
> with regards ,
>
> persaie
>
> _________________________________________________________________
> Take a loan. Win great prizes! Handsome prizes to be won!  Take a loan 
> & win TV, Fridge & many more prizes ! 
> http://go.msnserver.com/IN/44044.asp