explanation of the syslog LEN and WINDOW entries

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Is there an explanation of the LEN and WINDOW fields in an
iptables/netfilter syslog entry?

In the first example I have a LEN=60 and a WINDOW=5840. Can I use
these entries to calculate bandwidth usage?

In the second example I have a LEN=60 and a LEN=56. Can I use these
entries to calculate bandwidth usage?


Example: IN=eth1 OUT=eth0 SRC=******* DST=******* LEN=60 TOS=0x00
PREC=0x00 TTL=62 ID=11625 DF PROTO=TCP SPT=4741 DPT=1901 WINDOW=5840
RES=0x00 SYN URGP=0

Example: IN=eth1 OUT=eth0 SRC=******* DST=******* LEN=76 TOS=0x10
PREC=0x00 TTL=62 ID=0 DF PROTO=UDP SPT=123 DPT=123 LEN=56

Thanks, Jeff
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux