6.2 How to do accounting with ferm and collectdĬhain 'filter' 'FORWARD' 'MatchThisComment'.6.1 How to marry shorewall accounting and collectd.Please read the Plugin iptables section of the nf(5) manual page for an in-depth description of the plugin's configuration. it cannot work without configuration, because there is no reasonable default behavior. This means that it is talking directly with the kernel and the overhead is as low as it gets. Of course this plugin uses libiptc and does not fork the iptables(8) / ip6tables(8) application. This means that depending on your firewall layout you can collect certain services (such as the amount of web-traffic), source or destination hosts or networks, dropped packets and much more. “the fourth rule in the ‘INPUT’ queue in the ‘filter’ table”) or by its comment (using the “COMMENT” match). You can select rules that should be collected either by their position (e. g. It can collect the byte- and packet-counters of selected rules and submit them to collectd.

firewall) for both the IPv4 and the IPv6 protocol. The IP-Tables plugin can gather statistics from your ip_tables based packet filter (aka.

Iptables input