different traffic accounting trafd vs. ipcad

[Andre Rein]

Hi ML,

I'm running two different accounting programs at the firewall (ipcad &
trafd) and it looks like that trafd doesn't account the whole traffic,
because the sum of the individual tcp/udp/icmp traffic doesn't match the
ipcad accounting.

There are differences in between 0-50 MB a day. One time trafd accounts
more outgoing traffic than ipcad but the incoming is much lesser.
If I compare the accounting from our local provider with the ipcad traffic
I get nearly the same results.
So it must be trafd or a wrong config i did.


So my question, does anybody run into the same trouble with trafd and
solved it or is there any other Software wich can count port based traffic
and is more documented and tested?


here some network/trafd related stuff:

processes:

/bin/trafd -r -O -i fxp0
/sbin/natd -l -a 195.226.65.125 -unregistered_only

nic's:
fxp0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
   inet 192.168.55.74 netmask 0xfffffffc broadcast 192.168.55.75
   inet6 fe80::260:b0ff:fe67:e801%fxp0 prefixlen 64 scopeid 0x1
   ether 00:60:b0:67:e8:01
   media: Ethernet autoselect (100baseTX <full-duplex>)
   status: active
fxp1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
   inet 195.226.65.125 netmask 0xffffffc0 broadcast 195.226.65.127
   inet6 fe80::290:27ff:fe22:b7e8%fxp1 prefixlen 64 scopeid 0x2
   ether 00:90:27:22:b7:e8
   media: Ethernet autoselect (100baseTX <full-duplex>)
   status: active

Routing tables:

Internet:
Destination        Gateway            Flags    Refs      Use  Netif Expire
default            192.168.55.73      UGSc       28 96501173   fxp0
......



kind regards

-- 

"And some greetings from the Toaster"