[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [hobbit] Graphing number of references to iptables chain

Andreas Kunberger wrote:

Am Mittwoch, 5. September 2007 11:30 schrieb Iain Conochie:

<snip>

Here you go. This must bu run as root so either Set UID root (bad!) or
use sudo

for i in $CHAINS
    do sudo $IPTABLES -L -n -v -x| grep ^"Chain $i"| awk {'print $2 " "
$6 " : " $5'}| sed s/packets,/packets/g >> $BBTMP/packets.$$
done
Seems to me, its graphs only the packets the default policy of the chain is applied to, i.e those who have not matche any ruly in the chain 
mfg
Andreas Kunberger
True. Personally I use a default "reject" rule hence this will graph what the firewall rejects. Obviously this will not really take into account what is allowed so maybe I was not too clear in my first statement. 

Iain