Subject: Re: [vserver] Feature request /proc/net/dev
From: Herbert Poetzl <herbert@13thfloor.at>
Date: Tue, 23 Mar 2010 18:36:53 +0100

On Tue, Mar 23, 2010 at 05:32:28PM +0100, Cryptronic wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1

> Hi Bertl,

> would it be possible to only give the cacct values back in
> /proc/net/dev ? 

sure it would be, but there are two problems with this
approach:

 - cacct doesn't contain the actual 'traffic' going over 
   the wire, it just accounts the socket data
 - how to map that socket data to interfaces for a guest
   having multiple interfaces active?

> So in a guest it would be possible to see exactly how much 
> traffic is causing the guest.

I think traffic accounting (in or outside the guest)
should be done via iptable account rules (which will
also be visible inside the guest btw)

best,
Herbert

> best regards
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.14 (GNU/Linux)
> 
> iEYEARECAAYFAkuo7RsACgkQOBdlVlcPuhwPxQCfcLel5IIRIj/L1Io1wSeRKidC
> W+IAniGnHoDymnW/DEXCtvQ/sKwUxHYY
> =+LBi
> -----END PGP SIGNATURE-----