19.03.2014, 06:18, "fsluck" <linuxl...@163.com>:
> how to tell tcpdump only to capture packets that go throught iptables

iptables can send packets to NetFilter loggger (-j NFLOG --nflog-group 20) on 
which tcpdump can capture (-i nflog:20)

> i want to calculate how many icmp packets are received  after i setup several 
> iptables rules for icmp.

Mere counting is possible even without tcpdump: each iptables rule has counters 
for bytes and packets (iptables -vnL INPUT).

-- 
    Denis Ovsienko
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers

Reply via email to