ipt_ACCOUNT Archives

Subject: ipt_ACCOUNT vs. conntrack

From: Neal Murphy <neal.p.murphy@xxxxxxxxxxxx>
To: ipt_ACCOUNT@xxxxxxxxxxxxxxxxxxxxxxx
Date: Mon, 24 Aug 2009 15:43:45 -0400

In the netfilter-devel list a few months back, you suggested conntrack 
accounting might now be a better solution than ipt_ACCOUNT. Harald Welte's 
paper from 2005 gave a nice overview of the 'status quo' and how conntrack 
could be enhanced to provide 'rich' accounting with little or,at worst, 
reasonable, overhead. 

Are there any newer writings that provide a look at the current (2.6.2x-ish) 
state of conntrack accounting?

ipt_ACCOUNT is probably the best solution for what it does. But if there are 
newer methods available that allow richer accounting and very low overhead, 
they ought to be explored, at least.


ipt_ACCOUNT - see http://www.intra2net.com/en/developer/ipt_ACCOUNT for details.
To unsubscribe send a mail to ipt_ACCOUNT+unsubscribe@xxxxxxxxxxxxxxxxxxxxxxx   

Current Thread