I am replying my own question: The answer in conntrack accounting. sysctl -w net.netfilter.nf_conntrack_acct=1 tcp 6 299 ESTABLISHED src=144.111.111.11 dst=192.168.1.2 sport=35042 dport=22 packets=585 bytes=41244 src=192.168.1.2 dst=144.111.111.11 sport=22 dport=35042 packets=423 bytes=195796 [ASSURED] mark=0 use=2 Thank you, -- Oguz YILMAZ On Fri, Nov 16, 2012 at 2:11 AM, Oguz Yilmaz <oguzyilmazlist@xxxxxxxxx> wrote: > Hello, > > Is it possible to reach current rx/tx information for each connection > without having to listen with pcap or redirecting to a user space > daemon? > > Regards, > > note: from freebsd session table: > > all tcp 31.160.60.10:443 <- 91.10.177.169:53315 ESTABLISHED:ESTABLISHED > [231786895 + 65535](+2304119762) [2922147009 + 65535](+2119412158) > age 00:01:38, expires in 24:00:00, 1307:1619 pkts, 60892:1696057 > bytes, rule 2 > id: 50535525b07ac0c0 creatorid: 21eda4d4 > > > -- > Oguz YILMAZ -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
