[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: ifconfig packet receive count



I think that you hit the nail on the head with the 32bit part.  I am
looking through the source right now.  If you want to look also, I would
recommend digging through the procfs and network code.  A quick scan of
the headers in the include/linux directory pointed me there.  I haven't
kernel hacked in a while so you will have to forgive me.  Look for
anything that writes to /proc/net/dev, you might want to also look at the
source for your ethernet device.  I think though that there isn't a work
around for this.  Is there a reason that you are needing a packet
count?  It probably wouldn't be that hard to bang something out that would
reset that number.

TIghe


>Date: Wed, 17 Oct 2001 23:31:13 -0500
>From: Jason Smith <jvsmith@midamer.net>
>Reply-To: silug-discuss@silug.org
>To: SILUG Discuss <silug-discuss@silug.org>
>Subject: ifconfig packet receive count
>
>I realize that I already kind of know the answer to this question but I'm
>just wondering the why behind it and why has it never been worked around,
>not that its that big of a deal.
>
>When i run ifconfig on a box running snort at work.  It gives the packet
>receive count as 2147483647, it's been like that for at least a week.  I
>realize that this number is 2^32 if counting from zero.  And I also realize
>that this being an i386 based system that it is based on 32 bits.  So I
>guess my real question is, is this a limitation in the kernel?  Sort of
>along the same line as the 2 GB mem limit in the 2.2 kernels.  Or is it
>something else?  And also not that its really extremely necessary how hard
>would it be to work around this?  I unfortunately don't have any programming
>skills so I am unable to read the kernel source and figure out an answer for
>myself.  So I ask all of you.  The kernel I am using is the standard 2.4.6.
>
>Thank you
>Jason Smith
>
>-
>To unsubscribe, send email to majordomo@silug.org with
>"unsubscribe silug-discuss" in the body.
>

-- 
Tighe Schlottog		Sys Admin at large	  /emry\"@"/accessus.net\
                             ook ook

"How much bug spray did we drink?  All I can remember distinctly is
 giggling and watching my hands melt."
					-ted johnson (redmeat.com)


-
To unsubscribe, send email to majordomo@silug.org with
"unsubscribe silug-discuss" in the body.