Hello all I am trying to get bandwidth accounting working with shorewall I wish to account for all traffic and have a breakdown by ports as i get billed for all my bandwidth so it is quite important to monitor all traffic. Also i would like to do charting to have a visual representation of my traffic however i am having difficulty getting this working and appeal to this mailing list for help thank you in advance. Running Debian squeeze with shorewall version is 4.4.11.6 installed from the repos NOTE i have also installed apt-get install xtables-addons-common to try and get per IP accounting going but get this error iptaccount -l net-loc libxt_ACCOUNT_cl userspace accounting tool v1.3 Showing table: net-loc Read failed: Can't get table information from kernel. Does it exist? I have mostly successfully gotten accounting working using this doc http://shorewall.net/Accounting.html By mostly i mean i get output when i run shorewall show web and even more when i run shorewall show However counters seem to get reset each time i restart shorewall # shorewall show web Shorewall 4.4.11.6 Chain web at pve-sun-1 - Tue Sep 16 15:28:19 MDT 2014 Counters reset Fri Sep 12 17:58:19 MDT 2014 Chain web (2 references) pkts bytes target prot opt in out source destination 3251K 4100M tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 tcp spt:80 261K 222M tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 tcp spt:443 3513K 4322M RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 I have added the below to my /etc/shorewall/accounting file NOTE not sure if i can use ACCOUNT lines as my shorewall version might be to old? should i or can i fix this? # # Accounting File - http://shorewall.net/Accounting.html # # /etc/shorewall/accounting # #ACTION CHAIN SOURCE DEST ... ACCOUNT(net-loc,10.0.0.0/8) - eth0 - ACCOUNT(net-loc,10.0.0.0/8) - - eth0 #ACTION CHAIN SOURCE DESTINATION PROTOCOL DEST SOURCE # PORT PORT ssh:COUNT - eth0 - tcp 22 ssh:COUNT - - eth0 tcp - 22 DONE ssh ssh10276:COUNT - eth0 - tcp 10276 ssh10276:COUNT - - eth0 tcp - 10276 DONE ssh10276 web:COUNT - - eth0 tcp - 80 web:COUNT - - eth0 tcp - 443 DONE web smtp:COUNT - eth0 - tcp 25 smtp:COUNT - - eth0 tcp - 25 DONE smtp pop3:COUNT - eth0 - tcp 110 pop3:COUNT - - eth0 tcp - 110 DONE pop3 imap:COUNT - eth0 - tcp 143 imap:COUNT - - eth0 tcp - 143 DONE imap #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE Computer King CaN-Mail Surveillance King http://computerking.ca http://canmail.org http://surveillanceking.net Surveillance - Sales Service - Hosting Backup Internet Based Surveillance Systems Custom Service Pac kages Secure IMAP Email - Automated Remote Backups - Photo Blogs - Online ERP and Accounting Packages ------------------------------------------------------------------------------ Want excitement? Manually upgrade your production database. When you want reliability, choose Perforce. Perforce version control. Predictably reliable. http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk