1*a71a9546SAutomerger Merge WorkerThe nfacct match provides the extended accounting infrastructure for iptables. 2*a71a9546SAutomerger Merge WorkerYou have to use this match together with the standalone user-space utility 3*a71a9546SAutomerger Merge Worker.B nfacct(8) 4*a71a9546SAutomerger Merge Worker.PP 5*a71a9546SAutomerger Merge WorkerThe only option available for this match is the following: 6*a71a9546SAutomerger Merge Worker.TP 7*a71a9546SAutomerger Merge Worker\fB\-\-nfacct\-name\fP \fIname\fP 8*a71a9546SAutomerger Merge WorkerThis allows you to specify the existing object name that will be use for 9*a71a9546SAutomerger Merge Workeraccounting the traffic that this rule-set is matching. 10*a71a9546SAutomerger Merge Worker.PP 11*a71a9546SAutomerger Merge WorkerTo use this extension, you have to create an accounting object: 12*a71a9546SAutomerger Merge Worker.IP 13*a71a9546SAutomerger Merge Workernfacct add http\-traffic 14*a71a9546SAutomerger Merge Worker.PP 15*a71a9546SAutomerger Merge WorkerThen, you have to attach it to the accounting object via iptables: 16*a71a9546SAutomerger Merge Worker.IP 17*a71a9546SAutomerger Merge Workeriptables \-I INPUT \-p tcp \-\-sport 80 \-m nfacct \-\-nfacct\-name http\-traffic 18*a71a9546SAutomerger Merge Worker.IP 19*a71a9546SAutomerger Merge Workeriptables \-I OUTPUT \-p tcp \-\-dport 80 \-m nfacct \-\-nfacct\-name http\-traffic 20*a71a9546SAutomerger Merge Worker.PP 21*a71a9546SAutomerger Merge WorkerThen, you can check for the amount of traffic that the rules match: 22*a71a9546SAutomerger Merge Worker.IP 23*a71a9546SAutomerger Merge Workernfacct get http\-traffic 24*a71a9546SAutomerger Merge Worker.IP 25*a71a9546SAutomerger Merge Worker{ pkts = 00000000000000000156, bytes = 00000000000000151786 } = http-traffic; 26*a71a9546SAutomerger Merge Worker.PP 27*a71a9546SAutomerger Merge WorkerYou can obtain 28*a71a9546SAutomerger Merge Worker.B nfacct(8) 29*a71a9546SAutomerger Merge Workerfrom https://www.netfilter.org or, alternatively, from the git.netfilter.org 30*a71a9546SAutomerger Merge Workerrepository. 31