IPMON Format ???

[Fernando Gleiser]

On Thu, 11 Sep 2003 bsd at perimeter.co.za wrote:

> ===========================
> Sep 11 14:52:46 fox ipmon[47]: 14:52:45.248487 2x ed1 @0:3 P
> 196.23.158.10,25 -> 196.22.178.91,26704 PR tcp len 20 40 -A K-S
> OUT
> ===========================
>
> I have been able to figure out what it all means by reference to "man
> ipmon", except for the following two things:
>
> 1) the "2x" before the interface name (ed1).

It means the number of times that line was repeated. Instead of writing
two identical lines, it writes 2x. If there were three, it'd say 3x and
so on

> 2) the "K-S" right near the end of the line, before "OUT".

"keep state" IIRC


			Fer