Please help me to understand whats up...
My interface counter ng_ipacct on FreeBSD show traffic < than shows by AWstats. Although,
"The total file size sent from the web server to the end user does not include HTTP headers in served objects, HTTP request headers from users, nor bytes needed by the underlying network protocols." (Always must be traffic shown by interface counter >than shows by AWstats)... It' s very strange! I think that results from ng_ipacct more truthful because interface counter working inside kernel...
thanks in advance.
In apache's access log is information about size sent by a server to the client. And maybe further this information "is packed" into segments TCP, then "turns around" in IP-packets? I think netgraph works at a ip-level of the traffic counts, not further. Maybe that is why the difference in indications between Awstats and ng_ipacct?