Re: connection tracking without iptables?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, 2004-09-30 at 19:04, Jiann-Ming Su wrote:
> 
> Another thing I'm interested in is the total number of current
> connections.  Does /proc/net/ip_conntrack provide this info?  I've
> taken my iptables firewall offline,  and I would expect
> /proc/net/ip_conntrack to show very few connections, but it seems to
> still have quite a bit of historical connections left in it.
> 
> Basically, what I want to be able to do is graph the number of
> connections as a function of time with MRTG.  I just need to make sure
> I'm grabbing the right information.  The output of "iptables -nvxL"
> seems to be total packets processed.  Thanks again for any tips.

  egrep 'ESTABLISHED|ASSURED' /proc/net/ip_conntrack | wc -l

should give you the number of "active" TCP & UDP connections at any
given point in time.

-j

-- 
Jason Opperisano <opie@xxxxxxxxxxx>



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux