Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Why do I see different packet and byte counts for the same ports depending on how I select the ports with artsportmagg?

0
Posted

Why do I see different packet and byte counts for the same ports depending on how I select the ports with artsportmagg?

0

The selection algorithm for a selected port table object does not retain the source to destination port information. Instead, it lumps traffic into the lower of the source or destination port for ports in portlist, and lumps those that aren’t in portlist into the input counters for port 0. This means that if you use “artsportmagg -s 1-10000” and there is a src port = 6699 and a dst port = 2089, then the pkts/bytes will be added to 2089 and not to 6699. On the other hand, if you use “artsportmagg -s 80,20,6699,6688” and there is a src port = 6699 and a dst port = 2089, then the pkts/bytes will be added to 6699 and not to 0.

Related Questions

What is your question?

*Sadly, we had to bring back ads too. Hopefully more targeted.

Experts123