Re: [Shorewall-users] MARK accounting packet counts do not match mangle or tc

[Tom E. <te...@sh...>]

On Mon, 2012-01-30 at 11:22 -0600, David Koscinski wrote:

> Do I misunderstand the capabilities of the MARK column in the
> accounting table?  Or have I misconfigured something?

It's not possible to say, given what you have told us. 

1. Which chain(s) are you doing your TC marking in?
2. It appears that you are doing your accounting in the filter table, is
that correct? (Shorewall also allows you to do accounting in the
mangle).

I suspect that you are marking packets after they have been through
accounting; that would explain what you are seeing. You may wish to
refer to the diagram at http://www.shorewall.net/NetfilterOverview.html.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________