session packet count sent/received
-
I want to preface this by saying I could've sworn I found it but my mind is playing tricks on me.
Is there a way to see historical data of a firewall rule, say an hour ago, and see the packet bytes sent and received during that time. Or is there just a general way of seeing packets byte count sent and received at any time. I know pftop is good for active flows but it just shows you the total amount for the session but I want the amount sent and the amount received during the lifetime of the session.
-
@michmoor Are you thinking the state table under diagnostics.. This will show you active states and the packets and bytes sent/recv
This wont show you for past states, but if the state is active should be the numbers for that state.
-
@johnpoz state table just shows total amount of bytes for the session that’s active but it won’t show you what each host send and received.
-
@michmoor but you said per session. Hosts have many many sessions. Should of mentioned "host" or client..
-
@johnpoz it was darkstat - that was the package I was thinking of.
Do you know if the counters are reset every day or just continuously run? -
@michmoor while I have darkstat installed, and have used it in the past. I normally don't have it running unless looking for something specific going on right then.. So not sure on that question.
-
@johnpoz fair enough then. thanks!
