I came across the following config file:# Generated by iptables-save v1.3.1 on Sun Apr 23 06:19:53 2006*filter:INPUT ACCEPT [368:102354]:FORWARD ACCEPT [0:0]:OUTPUT ACCEPT [92952:20764374]-A INPUT -i lo -j ACCEPT-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT-A INPUT -i eth0 -p tcp -m tcp --dport 22 -j ACCEPT-A INPUT -i eth0 -p tcp -m tcp --dport 80 -j ACCEPT-A INPUT -m limit --limit 5/min -j LOG --log-prefix iptables denied:  --log-level 7-A INPUT -j DROPCOMMIT# Completed on Sun Apr 23 06:19:53 2006 Does anyone know what [368:102354], [0:0] and [92952:20764374] mean?
What do numbers in INPUT,FORWARD,OUTPUT chains mean in iptables config file?
iptables
The two values correspond to the number of packets and the number of bytes that the chain's default policy has been applied to so far (see this other answer for details).According to the source code in iptables-save.c itself:/* Dump out chain names first, * thereby preventing dependency conflicts */for (chain = iptc_first_chain(h);     chain;     chain = iptc_next_chain(h)) {    printf(:%s , chain);    if (iptc_builtin(chain, h)) {        struct xt_counters count;        printf(%s , iptc_get_policy(chain, &count, h));        printf([%llu:%llu]\n,                (unsigned long long)count.pcnt,                (unsigned long long)count.bcnt);    } else {        printf(- [0:0]\n);    }}And, the structure xt_counters is defined as follow in include/linux/netfilter/x_tables.h:struct xt_counters {    __u64 pcnt, bcnt; /* Packet and byte counters */};Note also that chains which are not builtin are marked with [0:0] anyway (it's a quirk in the code).