Firewall Rule to count all bytes not working

Hi

If I implement a filter rule as follows:

[Jeandre@MikroTik] > ip firewall mangle print
Flags: X - disabled, I - invalid, D - dynamic 
 0   chain=prerouting action=passthrough src-address-list=Media-Center dst-address-list=Local 

 1   chain=prerouting action=passthrough src-address-list=Local dst-address-list=Media-Center 

[Jeandre@MikroTik] > ip firewall address-list print
Flags: X - disabled, D - dynamic 
 #   LIST                                                                                                                                                 ADDRESS                        
 1   Media-Center                                                                                                                                         192.168.0.150                       
 8   Local                                                                                                                                                192.168.0.0/24                 
 9   Local                                                                                                                                                172.16.0.0/16                  
[Jeandre@MikroTik] >

It does not seem to count all the data. I tested it by copying a 350MB file from one of my pc’s on the network (192.168.0.157) to another (192.168.0.150). It did count the data but was fractional compared to the actual amount transferred (it counted an order of bytes vs 350MB). Is there some reason for this? Does it perhaps only count a portion of the data, or only the headers. Has it got to do with the connections? Under hotspot>active the usage for this user for this example counted the data perfectly. I observed this in the hotspot>active list for this user.

Is there some way I could implement a similar rule to count such (internal) data. For the purposes of calculating the actual internet usage of a node by means of subtracting the local traffic usage from the total hotspot usage. (As the hotspot account for all data and does not exclude internal traffic, even via the walled-garden list)

Thanks so much

:slight_smile:

ADD: yet when I add a firewall similar to the one in the code above, but instead of src/dst address i specify out interaface as EtherNet_Wifi_EoIP_Bride (my local bridge) it counts the data perfectly.. Is that correct?