Alvaro Mantilla Gimenez <alv...@dydnetworks.com> writes: > That will give me the total amount of statistics for the group, right? > That's not I want. I want to have separate statistics for the external > interface and for the internal network. The firewall itself generates > traffic that it is not related with the internal network.
Well, in addition to the stuff henning mentioned, you could do things like use labels in your rules to collect statistics, or for that matter collect netflow data via pflow(4) and do all the data massaging you could possibly want based on the data you collect. Just my NOK 0.02. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.
