Looking for where the above script file lives in the file system…
You are correct I haven’t stated the problem very well. For example if i have all bittorrent traffic set to go on port 51413 and I have Class: 211P2P set with two port rules.
(tcp) Destination port 51413
(udp) Destination port 51413
I would think that all the traffic would go into this class except that I see it in the 210 Default class instead when looking at the graph.
Also i have a tcpdump of the data coming in to port 51413 so i know it’s there:
194.223.39.156.57523 > 24.99.70.100.51413: Flags [.], cksum 0x549d (incorrect -> 0x4d7e), seq 8110544:8113424, ack 12810, win 1026, length 2880
10:51:53.230873 IP (tos 0x20, ttl 114, id 36727, offset 0, flags [DF], proto TCP (6), length 1480)
194.223.39.156.57523 > 24.99.70.100.51413: Flags [.], cksum 0x4e6a (correct), seq 8113424:8114864, ack 12810, win 1026, length 1440
10:51:53.231021 IP (tos 0x0, ttl 62, id 61503, offset 0, flags [DF], proto TCP (6), length 40)
24.99.70.100.51413 > 194.223.39.156.57523: Flags [.], cksum 0x62e9 (correct), ack 8113424, win 12341, length 0
10:51:53.231652 IP (tos 0x20, ttl 114, id 36728, offset 0, flags [DF], proto TCP (6), length 2920)