On Sat, 2004-12-04 at 08:53, Vladimir S. Petukhov wrote: > sorry for my english... > How can I calculate total traffic from/to single process? > It's easy to calculate outgoing traffic using --owner rule, but what's about > ingoing? > process may be identify by PID & uid/euid/gid... i *think* the "owner-socketlookup" patch from POM allows you to use "-m owner" in INPUT. -j -- "Ah, good ol' trustworthy beer. My love for you will never die." --The Simpsons