Uh, no I think I may be wrong here. That might only count for NAT packets. The 600.000 bytes might be due to compression. How did you download the file? -Sietse -----Original Message----- From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx [mailto:netfilter-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Sietse van Zanen Sent: Thursday, March 15, 2007 18:00 To: Michele Petrazzo - Unipex srl; netfilter@xxxxxxxxxxxxxxxxxxx Subject: RE: bytes count question Yes, only the first packet of a connection is counted. You should use a traffic analyzer for what you want to do. -Sietse -----Original Message----- From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx [mailto:netfilter-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Michele Petrazzo - Unipex srl Sent: Thursday, March 15, 2007 15:57 To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: bytes count question Hi list, I'm making some test for see "how many traffic" create an IP, so, into the gateway, I create a chain, add a rule so all the traffic go through it, and here accept all the traffic. After, from that IP, I download a file that has 1 MB and I control with a "iptables -nxvL my_chain" what number are on the "bytes" columns, but with a big surprise, I see 60000. What're this number? I thought to find something like 1048000 (or similar)! I'm missing something? Thanks, Michele