Configure a filter profile:
- [edit]
- accounting-options {
-
- file fw_accounting {
- size 500k files 4;
- }
-
- filter-profile fw_profile1 {
- file fw_accounting;
- interval 60;
-
- counters {
- counter1;
- counter2;
- counter3;
- }
- }
- }
- firewall {
-
- filter myfilter {
- accounting-profile fw_profile1;
- ...
-
- term accept-all {
-
- then {
- count counter1;
- accept;
- }
- }
- }
- }
The filter profile, fw-profile1, writes data to the file fw_accounting. The file might look like the following:
#FILE CREATED 976825278 2000-12-14-20:21:18 #hostname host #profile-layout fw_profile1,epoch-timestamp,filter-name,counter-name,packet-count,byte-count fw_profile1,976826058,myfilter,counter1,163,10764 ... #FILE CLOSED 976826178 2000-12-14-20:36:18