From owner-freebsd-pf@freebsd.org Tue Dec 22 18:18:30 2015 Return-Path: Delivered-To: freebsd-pf@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0BBD0A4FFDE for ; Tue, 22 Dec 2015 18:18:30 +0000 (UTC) (envelope-from nino.gxagxa@gmail.com) Received: from mail-wm0-x231.google.com (mail-wm0-x231.google.com [IPv6:2a00:1450:400c:c09::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id B4AAC1F15 for ; Tue, 22 Dec 2015 18:18:29 +0000 (UTC) (envelope-from nino.gxagxa@gmail.com) Received: by mail-wm0-x231.google.com with SMTP id l126so120681285wml.0 for ; Tue, 22 Dec 2015 10:18:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=UkN2P/kePAEMDFl7InKNOBPJt8s+0FuUC3rEpBIiCyI=; b=m2AHaTNwbcAEew8HJFtXDjIsL1WempVewvGgKv/YOohRs8D58KfjO+d1Zp7j+H2/Ky 0HcnjfysnOAYKyDXuTfvp35JG4AMWxFd70sRQFV9EVOYq7MOdt3XOy/e0I767sQcTVco 8mnZudQmtutwpT6aiugpldnWXvL65sFG+E+6OmFKaqOVgV8t7KqBoBz7u6/kuAGF5t5H AM0MJ9UNVNggNTO1D5f8BuEsTfFKBFvgmMbPBLlSKRTnWlyzqUOVy+zDDZwzy/kIsO/Y bCwyyipYchgz16IMDh43dOJG2BzNZdA1d5pTFto1/6iJqBVc7UMw5ea/JL85Ubp87CqA nZJw== MIME-Version: 1.0 X-Received: by 10.194.115.129 with SMTP id jo1mr29258014wjb.28.1450808308280; Tue, 22 Dec 2015 10:18:28 -0800 (PST) Received: by 10.28.0.203 with HTTP; Tue, 22 Dec 2015 10:18:28 -0800 (PST) Received: by 10.28.0.203 with HTTP; Tue, 22 Dec 2015 10:18:28 -0800 (PST) Date: Tue, 22 Dec 2015 10:18:28 -0800 Message-ID: Subject: From: Sikelelwa Gxagxa To: freebsd-pf@freebsd.org Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Dec 2015 18:18:30 -0000 hi i am permanent for more than six months and I don't have any bills I stay with my parents an I earn R3000 a month do I qualify please reply ASAP Thanks From owner-freebsd-pf@freebsd.org Tue Dec 22 22:35:24 2015 Return-Path: Delivered-To: freebsd-pf@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9C8C1A50846 for ; Tue, 22 Dec 2015 22:35:24 +0000 (UTC) (envelope-from yavuz.maslak@netiletisim.net) Received: from mail.netiletisim.net (mail.netiletisim.net [31.145.80.3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 5C26E14C0 for ; Tue, 22 Dec 2015 22:35:23 +0000 (UTC) (envelope-from yavuz.maslak@netiletisim.net) Received: from localhost (localhost [127.0.0.1]) by mail.netiletisim.net (Postfix) with ESMTP id 7C507125FAA for ; Wed, 23 Dec 2015 00:23:25 +0200 (EET) Received: from mail.netiletisim.net ([127.0.0.1]) by localhost (mail.netiletisim.net [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id UTHMwhOROxMs for ; Wed, 23 Dec 2015 00:23:25 +0200 (EET) Received: from localhost (localhost [127.0.0.1]) by mail.netiletisim.net (Postfix) with ESMTP id 4A6D0125FAB for ; Wed, 23 Dec 2015 00:23:25 +0200 (EET) X-Virus-Scanned: amavisd-new at netiletisim.net Received: from mail.netiletisim.net ([127.0.0.1]) by localhost (mail.netiletisim.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id xYVhJtTHyZBq for ; Wed, 23 Dec 2015 00:23:25 +0200 (EET) Received: from [10.11.1.105] (unknown [10.11.1.105]) by mail.netiletisim.net (Postfix) with ESMTPSA id D4E87125FAA for ; Wed, 23 Dec 2015 00:23:24 +0200 (EET) From: Yavuz Maslak-Netiletisim Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Subject: How can get more details usage of traffic for each ips? Message-Id: Date: Wed, 23 Dec 2015 00:26:56 +0200 To: freebsd-pf@freebsd.org Mime-Version: 1.0 (Mac OS X Mail 9.1 \(3096.5\)) X-Mailer: Apple Mail (2.3096.5) X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Dec 2015 22:35:24 -0000 i use pf for fw rules.=20 I have a table , i want to see statistics of each ip on the table using = pfctl -t tablename -vTsh But i only get ipaddress and theirs clear time. i can not more details = in/out bytes usage. But i can get for all tables as global. how can i fix that ? =20= From owner-freebsd-pf@freebsd.org Wed Dec 23 00:05:54 2015 Return-Path: Delivered-To: freebsd-pf@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D1307A50684 for ; Wed, 23 Dec 2015 00:05:54 +0000 (UTC) (envelope-from rob@logicalhosting.ca) Received: from mail-io0-x233.google.com (mail-io0-x233.google.com [IPv6:2607:f8b0:4001:c06::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id A82FA18E4 for ; Wed, 23 Dec 2015 00:05:54 +0000 (UTC) (envelope-from rob@logicalhosting.ca) Received: by mail-io0-x233.google.com with SMTP id e126so202215017ioa.1 for ; Tue, 22 Dec 2015 16:05:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=logicalhosting.ca; s=google; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=uUrTSQpBrHsw4lOCpc4LtfOsKYi+ARnwb9PenZ+JNdY=; b=SN83PyKPTV1iLMYwnc6PGvFS6kQUVfTK1fK4UtGZHBKW84xbJ+MZFrOGc80agF2gXR xQrhwam3fEoVDuYXu3pVhqy+MJ7htFe2Bw/BTkQ5KnmMlJ6GzdNdCc3C30m8+OjtJuz9 JtSkJx64P84eveOMDbsSyhFv9fXzlE1BSS8vA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=uUrTSQpBrHsw4lOCpc4LtfOsKYi+ARnwb9PenZ+JNdY=; b=TwCUTlQH7cnjhiTS7MikNZO2++Ud/eCsOZOrnkPMLPWvq/VMjJrRT6mR/4y4IKnTFq gUkxJJGc/LHrAwt6W4OdIyVoE1Hrqk3j6b3s0XTa5aT5Zafl3z+0tVa3Wu3zXKuzCum1 9GCveoVOmLb4Ykd9TwViEuacO/zlYGQpmuH80tDOu/797ff+L+glhlj9wuFyrd05JtNx +gxHM7XuBqv2JngP9V+3gBF8MbDVKuhHdm5zeVjU/8oPdxCMFT4WRABsUCvNd00obcFp 8CTlQDdIX+BuyflruuH8MOUwF0s+27+UNP6xXrSydxOi0frFt/F4nyVtSJOvhQ792cub jHXg== X-Gm-Message-State: ALoCoQlCvnmxkdw/ooIaw656fYnbKr+eir4laAYrEUdlZL2XLJzkBG6RbZJa1K1tDuYEDROvcejoojkT0SlzANr2pi8aR+sm6w== MIME-Version: 1.0 X-Received: by 10.107.11.162 with SMTP id 34mr27288200iol.165.1450829154022; Tue, 22 Dec 2015 16:05:54 -0800 (PST) Received: by 10.107.57.130 with HTTP; Tue, 22 Dec 2015 16:05:53 -0800 (PST) In-Reply-To: References: Date: Tue, 22 Dec 2015 17:05:53 -0700 Message-ID: Subject: Re: How can get more details usage of traffic for each ips? From: Rob Fraser To: Yavuz Maslak-Netiletisim Cc: freebsd-pf@freebsd.org Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Dec 2015 00:05:55 -0000 Write a rule for each ip ? On Tue, Dec 22, 2015 at 3:26 PM, Yavuz Maslak-Netiletisim < yavuz.maslak@netiletisim.net> wrote: > i use pf for fw rules. > > I have a table , i want to see statistics of each ip on the table using > pfctl -t tablename -vTsh > > But i only get ipaddress and theirs clear time. i can not more details > in/out bytes usage. But i can get for all tables as global. > > how can i fix that ? > > > _______________________________________________ > freebsd-pf@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-pf > To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org" > -- Rob Fraser rob@logicalhosting.ca www.logicalhosting.ca From owner-freebsd-pf@freebsd.org Wed Dec 23 08:11:21 2015 Return-Path: Delivered-To: freebsd-pf@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D2792A4F4B4 for ; Wed, 23 Dec 2015 08:11:21 +0000 (UTC) (envelope-from yavuz.maslak@netiletisim.net) Received: from mail.netiletisim.net (mail.netiletisim.net [31.145.80.3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 6C4181069 for ; Wed, 23 Dec 2015 08:11:20 +0000 (UTC) (envelope-from yavuz.maslak@netiletisim.net) Received: from localhost (localhost [127.0.0.1]) by mail.netiletisim.net (Postfix) with ESMTP id 9601912400D; Wed, 23 Dec 2015 10:07:42 +0200 (EET) Received: from mail.netiletisim.net ([127.0.0.1]) by localhost (mail.netiletisim.net [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id UbYWsrITDJO8; Wed, 23 Dec 2015 10:07:41 +0200 (EET) Received: from localhost (localhost [127.0.0.1]) by mail.netiletisim.net (Postfix) with ESMTP id A262D124078; Wed, 23 Dec 2015 10:07:41 +0200 (EET) X-Virus-Scanned: amavisd-new at netiletisim.net Received: from mail.netiletisim.net ([127.0.0.1]) by localhost (mail.netiletisim.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id p5BlKCa1gEL1; Wed, 23 Dec 2015 10:07:41 +0200 (EET) Received: from [10.11.2.135] (unknown [10.11.2.135]) by mail.netiletisim.net (Postfix) with ESMTPSA id 779AE12400D; Wed, 23 Dec 2015 10:07:41 +0200 (EET) Mime-Version: 1.0 (Mac OS X Mail 9.1 \(3096.5\)) Subject: Re: How can get more details usage of traffic for each ips? From: Yavuz Maslak-Netiletisim In-Reply-To: Date: Wed, 23 Dec 2015 10:11:01 +0200 Cc: freebsd-pf@freebsd.org Message-Id: References: To: Rob Fraser X-Mailer: Apple Mail (2.3096.5) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Dec 2015 08:11:21 -0000 How can i write it? could you give me an example ? > On 23 Dec 2015, at 02:05, Rob Fraser wrote: >=20 > Write a rule for each ip ?=20 >=20 > On Tue, Dec 22, 2015 at 3:26 PM, Yavuz Maslak-Netiletisim = > = wrote: > i use pf for fw rules. >=20 > I have a table , i want to see statistics of each ip on the table = using pfctl -t tablename -vTsh >=20 > But i only get ipaddress and theirs clear time. i can not more details = in/out bytes usage. But i can get for all tables as global. >=20 > how can i fix that ? >=20 >=20 > _______________________________________________ > freebsd-pf@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-pf = > To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org = " >=20 >=20 >=20 > --=20 > Rob Fraser > rob@logicalhosting.ca > www.logicalhosting.ca From owner-freebsd-pf@freebsd.org Wed Dec 23 08:32:31 2015 Return-Path: Delivered-To: freebsd-pf@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D8AFDA4FB71 for ; Wed, 23 Dec 2015 08:32:31 +0000 (UTC) (envelope-from woodsb02@gmail.com) Received: from mail-lb0-x22a.google.com (mail-lb0-x22a.google.com [IPv6:2a00:1450:4010:c04::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 6374B1B2A for ; Wed, 23 Dec 2015 08:32:31 +0000 (UTC) (envelope-from woodsb02@gmail.com) Received: by mail-lb0-x22a.google.com with SMTP id bc4so42927688lbc.2 for ; Wed, 23 Dec 2015 00:32:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=0oOj0weojTZSBspY95D8qTv1Or/aQvN5IwpVALJ7dlQ=; b=LoRRV4nSt8ovI74evIpQ0UTyYvdG4J5792ljFENop0t1NUn+3eteCFXa2cAqKW9zdy TRKztsV9vdLDtCEc2+9ccVo1F4KnnBujpInSFNWQ8zZdJPUgpeOjAn6QQKaLrrY7msum K5xYePSwADukTNcNm752fSOhQu4xoUC6XsJiPCQGSRXDB+zIL0DU+iqrXKApJC0RfXv7 bC2LuBzBCy/2mflr5vdtWGly+ZRXx8UQHXsG7Kx0WtzG4GWvy2D+cwde9ECpXVneDKtD 2NwS6AHTCVSQ2mgrqps3SjYo0y/P2qvq9Who7KK5VQz1l6CE9y/uruVOBLapyi5anRCQ Ydrg== MIME-Version: 1.0 X-Received: by 10.112.168.70 with SMTP id zu6mr9786862lbb.26.1450859549362; Wed, 23 Dec 2015 00:32:29 -0800 (PST) Received: by 10.25.141.129 with HTTP; Wed, 23 Dec 2015 00:32:29 -0800 (PST) In-Reply-To: References: Date: Wed, 23 Dec 2015 09:32:29 +0100 Message-ID: Subject: Re: How can get more details usage of traffic for each ips? From: Ben Woods To: Yavuz Maslak-Netiletisim Cc: "freebsd-pf@freebsd.org" Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Dec 2015 08:32:32 -0000 On Tuesday, 22 December 2015, Yavuz Maslak-Netiletisim < yavuz.maslak@netiletisim.net> wrote: > i use pf for fw rules. > > I have a table , i want to see statistics of each ip on the table using > pfctl -t tablename -vTsh > > But i only get ipaddress and theirs clear time. i can not more details > in/out bytes usage. But i can get for all tables as global. > > how can i fix that ? > I'm not sure if pfctl can give statistics on a per IP basis. For that, I have used one of the following methods (both of which require further programs and data collection of network traffic than what is built in to pf): 1. darkstat for simple (low volume) setups. 2. netflow export to a collector for analysis in high volume setups. Regards, Ben -- -- From: Benjamin Woods woodsb02@gmail.com From owner-freebsd-pf@freebsd.org Wed Dec 23 09:47:07 2015 Return-Path: Delivered-To: freebsd-pf@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9E549A4999B for ; Wed, 23 Dec 2015 09:47:07 +0000 (UTC) (envelope-from daemon-user@freebsd.org) Received: from phabric-backend.rbsd.freebsd.org (unknown [IPv6:2607:fc50:2000:101::1bb:73]) by mx1.freebsd.org (Postfix) with ESMTP id 8A8081A51 for ; Wed, 23 Dec 2015 09:47:07 +0000 (UTC) (envelope-from daemon-user@freebsd.org) Received: by phabric-backend.rbsd.freebsd.org (Postfix, from userid 1346) id 86B7E1001A; Wed, 23 Dec 2015 09:47:07 +0000 (UTC) Date: Wed, 23 Dec 2015 09:47:07 +0000 To: freebsd-pf@freebsd.org From: "robak (Bartek Rutkowski)" Reply-to: D1944+331+90181aefda88703e@reviews.freebsd.org Subject: [Differential] [Commented On] D1944: PF and VIMAGE fixes Message-ID: X-Priority: 3 X-Phabricator-Sent-This-Message: Yes X-Mail-Transport-Agent: MetaMTA X-Auto-Response-Suppress: All X-Phabricator-Mail-Tags: Thread-Topic: D1944: PF and VIMAGE fixes X-Herald-Rules: none X-Phabricator-To: X-Phabricator-To: X-Phabricator-To: X-Phabricator-To: X-Phabricator-To: X-Phabricator-To: X-Phabricator-To: X-Phabricator-To: X-Phabricator-To: X-Phabricator-Cc: X-Phabricator-Cc: X-Phabricator-Cc: X-Phabricator-Cc: X-Phabricator-Cc: X-Phabricator-Cc: X-Phabricator-Cc: X-Phabricator-Cc: Precedence: bulk In-Reply-To: References: Thread-Index: NDc2NzM0MzY4OTdiYThiNTU1MjY2ZDZmMTJiIFZ6bZs= MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="utf-8" X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.20 List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Dec 2015 09:47:07 -0000 robak added a comment. Any news on that review? REVISION DETAIL https://reviews.freebsd.org/D1944 EMAIL PREFERENCES https://reviews.freebsd.org/settings/panel/emailpreferences/ To: nvass-gmx.com, bz, trociny, kristof, gnn, zec, rodrigc, glebius, eri Cc: mmoll, javier_ovi_yahoo.com, farrokhi, julian, robak, freebsd-virtualization-list, freebsd-pf-list, freebsd-net-list From owner-freebsd-pf@freebsd.org Fri Dec 25 13:46:21 2015 Return-Path: Delivered-To: freebsd-pf@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C2570A5055B for ; Fri, 25 Dec 2015 13:46:21 +0000 (UTC) (envelope-from daemon-user@freebsd.org) Received: from phabric-backend.rbsd.freebsd.org (unknown [IPv6:2607:fc50:2000:101::1bb:73]) by mx1.freebsd.org (Postfix) with ESMTP id ADD431967 for ; Fri, 25 Dec 2015 13:46:21 +0000 (UTC) (envelope-from daemon-user@freebsd.org) Received: by phabric-backend.rbsd.freebsd.org (Postfix, from userid 1346) id A9AE1331E73F; Fri, 25 Dec 2015 13:46:21 +0000 (UTC) Date: Fri, 25 Dec 2015 13:46:21 +0000 To: freebsd-pf@freebsd.org From: "robak (Bartek Rutkowski)" Reply-to: D1944+331+90181aefda88703e@reviews.freebsd.org Subject: [Differential] [Commented On] D1944: PF and VIMAGE fixes Message-ID: <34ca1ab140a7e7ca3570474fc3cfcc3c@localhost.localdomain> X-Priority: 3 X-Phabricator-Sent-This-Message: Yes X-Mail-Transport-Agent: MetaMTA X-Auto-Response-Suppress: All X-Phabricator-Mail-Tags: Thread-Topic: D1944: PF and VIMAGE fixes X-Herald-Rules: none X-Phabricator-To: X-Phabricator-To: X-Phabricator-To: X-Phabricator-To: X-Phabricator-To: X-Phabricator-To: X-Phabricator-To: X-Phabricator-To: X-Phabricator-To: X-Phabricator-Cc: X-Phabricator-Cc: X-Phabricator-Cc: X-Phabricator-Cc: X-Phabricator-Cc: X-Phabricator-Cc: X-Phabricator-Cc: X-Phabricator-Cc: Precedence: bulk In-Reply-To: References: Thread-Index: NDc2NzM0MzY4OTdiYThiNTU1MjY2ZDZmMTJiIFZ9SK0= MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="utf-8" X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.20 List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Dec 2015 13:46:21 -0000 robak added a comment. @bz: you've made some commits to VIMAGE code in past few days, how do they relate to this revision? Any chance you could review it and comment/commit on this? REVISION DETAIL https://reviews.freebsd.org/D1944 EMAIL PREFERENCES https://reviews.freebsd.org/settings/panel/emailpreferences/ To: nvass-gmx.com, bz, trociny, kristof, gnn, zec, rodrigc, glebius, eri Cc: mmoll, javier_ovi_yahoo.com, farrokhi, julian, robak, freebsd-virtualization-list, freebsd-pf-list, freebsd-net-list From owner-freebsd-pf@freebsd.org Fri Dec 25 15:13:12 2015 Return-Path: Delivered-To: freebsd-pf@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D82A2A511B6 for ; Fri, 25 Dec 2015 15:13:12 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id CA2411B7C for ; Fri, 25 Dec 2015 15:13:12 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id tBPFDCCM088010 for ; Fri, 25 Dec 2015 15:13:12 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-pf@FreeBSD.org Subject: [Bug 198868] pf brakes tcp checksum if enabled for ue adapter Date: Fri, 25 Dec 2015 15:13:13 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 10.1-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: commit-hook@freebsd.org X-Bugzilla-Status: New X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: freebsd-pf@FreeBSD.org X-Bugzilla-Target-Milestone: --- X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Dec 2015 15:13:12 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=198868 --- Comment #5 from commit-hook@freebsd.org --- A commit references this bug: Author: kp Date: Fri Dec 25 15:12:12 UTC 2015 New revision: 292731 URL: https://svnweb.freebsd.org/changeset/base/292731 Log: pf: Fix TSO issues In certain configurations (mostly but not exclusively as a VM on Xen) pf produced packets with an invalid TCP checksum. The problem was that pf could only handle packets with a full checksum. The FreeBSD IP stack produces TCP packets with a pseudo-header checksum (only addresses, length and protocol). Certain network interfaces expect to see the pseudo-header checksum, so they end up producing packets with invalid checksums. To fix this stop calculating the full checksum and teach pf to only update TCP checksums if TSO is disabled or the change affects the pseudo-header checksum. PR: 154428, 193579, 198868 Sponsored by: RootBSD Changes: stable/9/sys/contrib/pf/net/pf.c stable/9/sys/contrib/pf/net/pf_ioctl.c stable/9/sys/contrib/pf/net/pf_norm.c stable/9/sys/contrib/pf/net/pfvar.h -- You are receiving this mail because: You are the assignee for the bug. From owner-freebsd-pf@freebsd.org Fri Dec 25 15:53:57 2015 Return-Path: Delivered-To: freebsd-pf@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 80418A51DBB for ; Fri, 25 Dec 2015 15:53:57 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 714BB19D9 for ; Fri, 25 Dec 2015 15:53:57 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id tBPFrvsO075785 for ; Fri, 25 Dec 2015 15:53:57 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-pf@FreeBSD.org Subject: [Bug 198868] pf brakes tcp checksum if enabled for ue adapter Date: Fri, 25 Dec 2015 15:53:57 +0000 X-Bugzilla-Reason: CC AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 10.1-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: koobs@FreeBSD.org X-Bugzilla-Status: In Progress X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: kp@freebsd.org X-Bugzilla-Target-Milestone: --- X-Bugzilla-Flags: mfc-stable9+ mfc-stable10+ X-Bugzilla-Changed-Fields: bug_status assigned_to cc flagtypes.name Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Dec 2015 15:53:57 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=198868 Kubilay Kocak changed: What |Removed |Added ---------------------------------------------------------------------------- Status|New |In Progress Assignee|freebsd-pf@FreeBSD.org |kp@freebsd.org CC| |freebsd-pf@FreeBSD.org Flags| |mfc-stable9+, mfc-stable10+ --- Comment #6 from Kubilay Kocak --- Assign to committer that's taking care of (resolving) this issue -- You are receiving this mail because: You are on the CC list for the bug. You are the assignee for the bug.