From owner-freebsd-hackers@FreeBSD.ORG  Tue Sep 23 10:16:13 2003
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id B07C516A4B3
	for <freebsd-hackers@freebsd.org>;
	Tue, 23 Sep 2003 10:16:13 -0700 (PDT)
Received: from kientzle.com (h-66-166-149-50.SNVACAID.covad.net
	[66.166.149.50])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 12A2744001
	for <freebsd-hackers@freebsd.org>;
	Tue, 23 Sep 2003 10:16:12 -0700 (PDT)
	(envelope-from kientzle@acm.org)
Received: from acm.org ([66.166.149.54])
	by kientzle.com (8.12.9/8.12.9) with ESMTP id h8NHGBkX083622;
	Tue, 23 Sep 2003 10:16:11 -0700 (PDT)
	(envelope-from kientzle@acm.org)
Message-ID: <3F707FDB.4060600@acm.org>
Date: Tue, 23 Sep 2003 10:16:11 -0700
From: Tim Kientzle <kientzle@acm.org>
User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.3.1) Gecko/20030524
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Uwe Klann <u.klann@t-online.de>
References: <LIEAKECJDNPINKLJPFODIEPGDHAA.u.klann@t-online.de>
	<20030922134531.A44366@xorpc.icir.org> <20030923122509.S87821@localhost>
In-Reply-To: <20030923122509.S87821@localhost>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
cc: freebsd-hackers@freebsd.org
Subject: Re: IPFW2
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: kientzle@acm.org
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 23 Sep 2003 17:16:13 -0000

>>On Mon, Sep 22, 2003 at 08:07:13PM +0200, Uwe Klann wrote:
>>>
>>>>From the Log file IPFW:-
>>>"Sep 22 00:24:13 muc /kernel: ipfw: 3300 Accept TCP 217.10.213.30:4418
>>>217.9.121.209:21 in via fxp0"
>>>
>>>How can I extend on FreeBSD 4.8 (ipfw2) the log contens to see the tranfered
>>>data File and the amount of bytes went out? Thank you in advance for your

tcpdump can be used to capture the full contents of particular packets.
Use -w to write captured packets to a file, -r to read that
file and examine the captured packets.  Design your tcpdump
capture expression carefully unless you have a lot of disk space.

Port 21 is FTP, so I presume you're trying to monitor FTP
activity.  If you're using FreeBSD's ftpd, look at
the -l and -S options (which provide fairly detailed
logging of FTP activity).  In particular, specifying
-l twice claims to provide detailed logging of each
transfer.

Tim Kientzle