From owner-freebsd-pf@FreeBSD.ORG Sun Apr 8 17:12:21 2007 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 34AB116A400 for ; Sun, 8 Apr 2007 17:12:21 +0000 (UTC) (envelope-from drew@mykitchentable.net) Received: from qsmtp3.mc.surewest.net (qsmtp.mc.surewest.net [66.60.130.145]) by mx1.freebsd.org (Postfix) with SMTP id 1B1B113C448 for ; Sun, 8 Apr 2007 17:12:20 +0000 (UTC) (envelope-from drew@mykitchentable.net) Received: (qmail 18411 invoked from network); 8 Apr 2007 10:12:20 -0700 Received: by simscan 1.1.0 ppid: 18393, pid: 18395, t: 4.2029s scanners: regex: 1.1.0 attach: 1.1.0 clamav: 0.84/m:42/d:2665 spam: 3.0.3 Received: from unknown (HELO blacklamb.mykitchentable.net) (66.205.146.210) by qsmtp3 with SMTP; 8 Apr 2007 10:12:16 -0700 Received: from [192.168.1.3] (bigdaddy.mykitchentable.net [192.168.1.3]) by blacklamb.mykitchentable.net (Postfix) with ESMTP id 10981164AF4 for ; Sun, 8 Apr 2007 10:12:15 -0700 (PDT) Message-ID: <4619226E.1030105@mykitchentable.net> Date: Sun, 08 Apr 2007 10:12:14 -0700 From: Drew Tomlinson User-Agent: Mozilla Thunderbird 1.0.7 (Windows/20050923) X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-pf@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on qsmtp3.surewest.net X-Spam-Level: X-Spam-Status: No, score=-0.2 required=5.0 tests=AWL,BAYES_00, RCVD_IN_SORBS_DUL autolearn=no version=3.0.3 Subject: pf and ALTQ - I Don't Understand X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Apr 2007 17:12:21 -0000 I am struggling to get pf set up correctly. Specifically I don't understand why I don't see any packets in the "pfctl -vs queue" output for a queue I named "voip_out". I see the packets matching rule 61 & rule 62 when viewing the log with "tcpdump -netttti pflog0": 2007-04-08 09:54:25.392552 rule 61/0(match): pass in on dc0: 192.168.1.7.5060 > 72.165.163.9.5060: SIP, length: 394 2007-04-08 09:54:54.580693 rule 62/0(match): pass in on dc0: 192.168.1.7 > 192.168.1.2: ICMP echo request, id 16724, seq 43514, length 40 2007-04-08 09:55:13.532744 rule 61/0(match): pass in on dc0: 192.168.1.7.5060 > 72.165.163.9.5060: SIP, length: 394 Rules 61 & 62 are: @61 pass log quick inet proto udp from 192.168.1.7 to any keep state queue voip_out [ Evaluations: 7237 Packets: 44 Bytes: 18502 States: 1 ] @62 pass log quick inet proto icmp from 192.168.1.7 to any keep state queue voip_out [ Evaluations: 331 Packets: 142 Bytes: 8520 States: 1 ] Yet here is the "pfctl -vs queue" output: queue voip_out bandwidth 175Kb priority 6 hfsc( realtime 140Kb ) [ pkts: 0 bytes: 0 dropped pkts: 0 bytes: 0 ] [ qlength: 0/ 50 ] [ measured: 0.0 packets/s, 0 b/s ] I have rules to prioritize http traffic and queuing works as expected there. Can anyone please explain to me why I am seeing this behavior? And is there some way to actually watch traffic passing through the queues? Thanks, Drew -- Be a Great Magician! Visit The Alchemist's Warehouse http://www.alchemistswarehouse.com