Help me understand netstat output

Tod McQuillin devin at spamcop.net
Sun Feb 20 18:22:06 GMT 2005


On a 5.3-STABLE system (and actually for the past few years on FreeBSD 4.x 
and 5.x), 'netstat -in' has show numbers like this:

Name    Mtu Network       Address              Ipkts Ierrs    Opkts Oerrs  Coll
xl0    1500 <Link#1>      00:04:76:5f:45:1f   622543     0   621123     0     0
xl0    1500 192.168.7     192.168.7.28        622208     -  2110040     -     -
lo0   16384 <Link#3>                             169     0      169     0     0
lo0   16384 127           127.0.0.1              169     -      169     -     -
wi0*   1500 <Link#4>      00:02:2d:29:28:7f        0     0        0     0     0

Why does the second line for xl0 show so many more outgoing packets than 
the first line?

It seems to me the first line (Link#1) should count all packets at OSI 
layer 2, and the second should count layer 3 (IP) packets.  I can see the 
layer 2 count being bigger than layer 3 count (lots of arp or other 
ether-only traffic) but not the other way around.

Anyone know the explanation for this?
-- 
Tod McQuillin



More information about the freebsd-stable mailing list