Help me understand netstat output
Tod McQuillin
devin at spamcop.net
Sun Feb 20 18:22:06 GMT 2005
On a 5.3-STABLE system (and actually for the past few years on FreeBSD 4.x
and 5.x), 'netstat -in' has show numbers like this:
Name Mtu Network Address Ipkts Ierrs Opkts Oerrs Coll
xl0 1500 <Link#1> 00:04:76:5f:45:1f 622543 0 621123 0 0
xl0 1500 192.168.7 192.168.7.28 622208 - 2110040 - -
lo0 16384 <Link#3> 169 0 169 0 0
lo0 16384 127 127.0.0.1 169 - 169 - -
wi0* 1500 <Link#4> 00:02:2d:29:28:7f 0 0 0 0 0
Why does the second line for xl0 show so many more outgoing packets than
the first line?
It seems to me the first line (Link#1) should count all packets at OSI
layer 2, and the second should count layer 3 (IP) packets. I can see the
layer 2 count being bigger than layer 3 count (lots of arp or other
ether-only traffic) but not the other way around.
Anyone know the explanation for this?
--
Tod McQuillin
More information about the freebsd-stable
mailing list