关于nf_conntrack文件里面的packets和bytes内容

smoker87

关于nf_conntrack文件

再centos6.5上
[root@JXKJDB ~]# cat /proc/version
Linux version 2.6.32-431.el6.x86_64 (mockbuild@c6b8.bsys.dev.centos.org) (gcc version 4.4.7 20120313 (Red Hat 4.4.7-4) (GCC) ) #1 SMP Fri Nov 22 03:15:09 UTC 2013

[root@local dbweb]# uname -a
Linux local 2.6.32-431.el6.x86_64 #1 SMP Fri Nov 22 03:15:09 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux

的nf_conntrack文件内容
cat /proc/net/nf_conntrack
ipv4     2 tcp      6 74 TIME_WAIT src=10.8.0.45 dst=10.8.0.70 sport=62874 dport=443 src=10.8.0.70 dst=10.8.0.45 sport=443 dport=62874 [ASSURED] mark=0 secmark=0 use=2
ipv4     2 tcp      6 299 ESTABLISHED src=10.8.0.45 dst=10.8.0.70 sport=61991 dport=50000 src=10.8.0.70 dst=10.8.0.45 sport=50000 dport=61991 [ASSURED] mark=0 secmark=0 use=2
ipv4     2 tcp      6 431992 ESTABLISHED src=10.8.0.70 dst=10.8.0.33 sport=50000 dport=61025 src=10.8.0.33 dst=10.8.0.70 sport=61025 dport=50000 [ASSURED] mark=0 secmark=0 use=2
ipv4     2 tcp      6 74 TIME_WAIT src=10.8.0.45 dst=10.8.0.70 sport=62879 dport=443 src=10.8.0.70 dst=10.8.0.45 sport=443 dport=62879 [ASSURED] mark=0 secmark=0 use=2
ipv4     2 tcp      6 74 TIME_WAIT src=10.8.0.45 dst=10.8.0.70 sport=62873 dport=443 src=10.8.0.70 dst=10.8.0.45 sport=443 dport=62873 [ASSURED] mark=0 secmark=0 use=2
ipv4     2 tcp      6 74 TIME_WAIT src=10.8.0.45 dst=10.8.0.70 sport=62878 dport=443 src=10.8.0.70 dst=10.8.0.45 sport=443 dport=62878 [ASSURED] mark=0 secmark=0 use=2
ipv4     2 udp      17 25 src=10.8.0.84 dst=10.8.0.255 sport=137 dport=137 [UNREPLIED] src=10.8.0.255 dst=10.8.0.84 sport=137 dport=137 mark=0 secmark=0 use=2
ipv4     2 tcp      6 74 TIME_WAIT src=10.8.0.45 dst=10.8.0.70 sport=62880 dport=443 src=10.8.0.70 dst=10.8.0.45 sport=443 dport=62880 [ASSURED] mark=0 secmark=0 use=2

截取了一部分，全部都是没有packets 和 bytes内容


再debain上
aaa:~# cat /proc/version
Linux version 2.6.35.12-2012r6360 (root@new-lenny) (gcc version 4.3.2 (Debian 4.3.2-1.1) ) #5 SMP Fri Aug 17 07:36:58 CST 2012
aaa:~# uname -a
Linux AFW 2.6.35.12-2012r6360 #5 SMP Fri Aug 17 07:36:58 CST 2012 i686 GNU/Linux
cat /proc/net/nf_conntrack

ipv4     2 udp      17 18 virt_mark=0x0 src=192.168.200.1 dst=210.72.145.44 sport=123 dport=123 packets=84 bytes=6384 [UNREPLIED] virt_mark=0x0 src=210.72.145.44 dst=192.168.200.1 sport=123 dport=123 packets=0 bytes=0 mark=0 secmark=0 zone=0 use=2
ipv4     2 tcp      6 299 ESTABLISHED virt_mark=0x0 src=10.8.0.45 dst=10.8.0.50 sport=51702 dport=22 packets=160 bytes=12405 virt_mark=0x0 src=10.8.0.50 dst=10.8.0.45 sport=22 dport=51702 packets=91 bytes=9793 [ASSURED] mark=0 secmark=0 zone=0 use=2

里面是带有packets 和bytes内容的


要如何才能让centos6.5也在nf_conntrack种有packets和bytes内容呢。
更新版本？怎么更新?
或者有没有什么其他办法

smoker87

centos6.5的
[root@local ~]# iptables -v
iptables v1.4.7: no command specified
Try `iptables -h' or 'iptables --help' for more information.

debain
aaa:~# iptables -v
iptables v1.4.9.1: no command specified
Try `iptables -h' or 'iptables --help' for more information.

smoker87

有没有什么系统配置选项，能配置上去的？