On Mar 15 2007 15:56, Michele Petrazzo - Unipex srl wrote: > > Hi list, > I'm making some test for see "how many traffic" create an IP, so, into > the gateway, I create a chain, add a rule so all the traffic go through > it, and here accept all the traffic. > After, from that IP, I download a file that has 1 MB and I control with > a "iptables -nxvL my_chain" what number are on the "bytes" columns, but > with a big surprise, I see 60000. > What're this number? > > I thought to find something like 1048000 (or similar)! (1) What is counted is L3 bytes, i.e. includes IP and TCP headers. (2) Compression on L4 (ipcomp) or L7 (gzipped HTTP transfer) (3) Use of caching proxies may reduce bandwidth by returned fresh entries And BTW, any traffic analyzer (like iptraf) will show the same counting. Jan --
