I want to know how many pkts were matched and dropped by my flowspec rule.
I'm looking at netflow9 docs and only usable field I find is FORWARDING STATUS. However if I set my flowspec rule to discard pkts which have size larger then 400 I have some mix of forwarded and discarded status. On top of that Router discards some of the pkts by itself.
Is there anyway to determine how many pkts have been matched to my flowspec rule?
