lug-bg: ipchains -L -Z
- Subject: lug-bg: ipchains -L -Z
- From: yanev@xxxxxxxxxxx (Yanev)
- Date: Sat, 26 Jan 2002 01:35:37 +0200
imam sledniq problem .... kogato polzwam ipchains -L -Z ne mi se nulirat
cauntarite ..... a w man page pishe :
-Z, --zero
Zero the packet and byte counters in all chains. It is
legal to specify the -L,--list (list) option as well, to see the counters
immediately before they are cleared; if this is done, then no specific
chain can be specified (they will all be displayed and cleared).
no AZ ne poluchawam tozi efekt ne polucawam suobstenie za greshka printwa se
wsichko... na cauntarite ne se chistqt
togawa poglednah HOWTO-to i widqh slednoto ....
---------------------------------------------------------------------------------------
4.1.5.10. Resetting (Zeroing) Counters
It is useful to be able to reset the counters. This can be done with
the `-Z' (zero counters) option. For example:
# ipchains -v -L input
Chain input (refcnt = 1): (policy ACCEPT)
pkts bytes target prot opt tosa tosx ifname mark source
destination
ports
10 840 ACCEPT icmp ----- 0xFF 0x00 lo anywhere
anywhere
any
# ipchains -Z input
# ipchains -v -L input
Chain input (refcnt = 1): (policy ACCEPT)
pkts bytes target prot opt tosa tosx ifname mark source
destination
ports
0 0 ACCEPT icmp ----- 0xFF 0x00 lo anywhere
anywhere
any
#
The problem with this approach is that sometimes you need to know the
counter values immediately before they are reset. In the above
example, some packets could pass through between the `-L' and `-Z'
commands. For this reason, you can use the `-L' and `-Z' together, to
reset the counters while reading them. Unfortunately, if you do this,
you can't operate on a single chain: you have to list and zero all the
chains at once.
# ipchains -L -v -Z
Chain input (policy ACCEPT):
pkts bytes target prot opt tosa tosx ifname mark
source destination
ports
10 840 ACCEPT icmp ----- 0xFF 0x00 lo
anywhere anywhere
any
Chain forward (refcnt = 1): (policy ACCEPT)
Chain output (refcnt = 1): (policy ACCEPT)
Chain test (refcnt = 0):
0 0 DENY icmp ----- 0xFF 0x00 ppp0
localnet/24 anywhere
any
# ipchains -L -v
Chain input (policy ACCEPT):
pkts bytes target prot opt tosa tosx ifname mark
source destination
ports
10 840 ACCEPT icmp ----- 0xFF 0x00 lo
anywhere anywhere
any
Chain forward (refcnt = 1): (policy ACCEPT)
Chain output (refcnt = 1): (policy ACCEPT)
Chain test (refcnt = 0):
0 0 DENY icmp ----- 0xFF 0x00 ppp0
localnet/24 anywhere
any
#
----------------------------------------------------------------------------------------------
i kakto zabelqzwate ... w primera daden kak kato se izpolzwat -L -Z zadno
prosto ne se poluchawa towa koeto trqbwa ..... pkgs pordylzawa da si e 10 a
bytes da e 840
ta pitam ima li nachin da se naprawi towa koeto iskam ... ili primera koito
sa dali e dostatachno pokazatelen che NQMA ...
tawa wupros za :
ipchains 1.3.10
kernel 2.4.4
debian [woody]
i HOWTO-to ot linuxdoc
YaneV
===========================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers)
http://www.linux-bulgaria.org/ Hosted by Internet Group Ltd. - Stara Zagora
|