On Wed, Oct 10, 2001 at 07:49:49PM -0400, Andrew Brown wrote:
> it looks to me like whatever supports this is doing periodic polls of
> the totals from, eg, netstat -ib, and then computing deltas.  note
> that it only names eth0 and eth1, not subinterfaces or aliases.
> 
> i think that to do by-alias accounting, you'll need to use ipf.
> unfortunately, the last time i tried this, i found that a pass line
> didn't log and a log line didn't pass, so i had to do both.

Smething like this :
pass in log on pppoe0 proto udp from any to any port = 53
?

--
Manuel Bouyer <bouyer@antioche.eu.org>
--