different traffic accounting trafd vs. ipcad

[veedee at c7.campus.utcluj.ro]

On Tue, Feb 24, 2004 at 05:47:43PM +0300, Gleb Smirnoff wrote:
>   Dear Andre,
> 
> On Tue, Feb 24, 2004 at 03:42:38PM +0100, Andre Rein wrote:
> A> I'm running two different accounting programs at the firewall (ipcad &
> A> trafd) and it looks like that trafd doesn't account the whole traffic,
> A> because the sum of the individual tcp/udp/icmp traffic doesn't match the
> A> ipcad accounting.
> A> 
> 
>   trafd itself is very buggy. I'd better do not trust
> its data. Use ipcad, ipacct or ng_ipacct. trafd'd bugginess was discussed a
> lot in different russian-speaking mailinglists.

Can you please be more specific? What do you mean by buggy? I haven't
seen anything about that on the WWW, but then again, I do not speak russian
:(

> -- 
> Totus tuus, Glebius.
> GLEBIUS-RIPN GLEB-RIPE

Thanks.
-- 
| Radu Bogdan 'veedee' Rusu
| NetSysAdm at campus dot utcluj dot ro
| Personal gallery at http://www.rbrusu.com
| ...mirroring FreeBSD and coffee