Re: [BackupPC-users] [OT] Accounting (iptables): some results

> As you have been told (by me as well as someone else) you 
> can't count traffic between localhost (127.0.0.1) and any 
> remotehost, because the remote host will not be talking to 
> your 127.0.0.1 it will talk to itself on 127.0.0.1
> 
> Just remove the -d localhost and the -s localhost from the 
> SSH tunnel rules, and you will then see your actual network traffic.

Hehehe... Here I am back. Indeed the trouble was given by *me* of
course, wanting to filter out too much (with that localhost). And also,
now that I'm learning step-by-step: I shouldn't in any case be using
"localhost", but instead use eventually the eth0 IP!

Here what I've done:

iptables -A INPUT -p tcp --sport 8874
iptables -A OUTPUT -p tcp --dport 8874
iptables -A INPUT -s remotehost -p tcp --sport 22
iptables -A OUTPUT -d remotehost -p tcp --dport 22

Here what it gives:

storebox:~# iptables -L -nv --exact
Chain INPUT (policy ACCEPT 40220649 packets, 87803266224 bytes)
    pkts      bytes target     prot opt in     out     source
destination
       0        0            tcp  --  *      *       84.55.237.6
127.0.0.1           tcp spt:22
   24658 390971197            tcp  --  *      *       0.0.0.0/0
0.0.0.0/0           tcp spt:8874

Chain OUTPUT (policy ACCEPT 24635821 packets, 47029237338 bytes)
    pkts      bytes target     prot opt in     out     source
destination
   16014  6296414            tcp  --  *      *       0.0.0.0/0
0.0.0.0/0           tcp dpt:8874
   68820  9164973            tcp  --  *      *       0.0.0.0/0
84.55.221.14        tcp dpt:22

I guess I can in this way be accounting for "generated traffic".

Thanks,
Flavio Boniforti.

------------------------------------------------------------------------------
Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT 
is a gathering of tech-side developers & brand creativity professionals. Meet
the minds behind Google Creative Lab, Visual Complexity, Processing, & 
iPhoneDevCamp as they present alongside digital heavyweights like Barbarian 
Group, R/GA, & Big Spaceship. http://p.sf.net/sfu/creativitycat-com 
_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:    http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/