Date: Tue, 4 Jun 2013 17:53:41 +0200 From: Andreas Nilsson <andrnils@gmail.com> To: Michael Sierchio <kudzu@tenebras.com> Cc: FreeBSD Net <freebsd-net@freebsd.org> Subject: Re: ipfw and tablearg formatting Message-ID: <CAPS9%2BSuHTj-vmkUw56TwsFHWoudG0Hz_VPs%2BpS3ZHHofEUXqaw@mail.gmail.com> In-Reply-To: <CAHu1Y73JbFFDFeX0q%2Bo1X_NK4hoqxg_qDL8E1E_wTdhBvbybeg@mail.gmail.com> References: <CAPS9%2BSu=uQG5-s7qmgeUSgnqJscyMhRqXuApo0mkV%2BqZWU8u0g@mail.gmail.com> <CAHu1Y73JbFFDFeX0q%2Bo1X_NK4hoqxg_qDL8E1E_wTdhBvbybeg@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Jun 3, 2013 at 5:40 PM, Michael Sierchio <kudzu@tenebras.com> wrote: > On Mon, Jun 3, 2013 at 4:43 AM, Andreas Nilsson <andrnils@gmail.com> > wrote: > > Hello, > > > > Still trying out the tablearg functionality of ipfw and found the > following: > > > > 1) > > # ipfw table 100 add 192.168.0.0/24 10.0.0.1 > > # ipfw table 100 list > > 192.168.0.0/24 167772161 > > > > I guess it is correct, but not user friendly. Can't the tablearg part be > > printed as normal dotted decimal? > > No - it's an integer. The semantics of the table arg are up to you, > but it could be a rule number, used in a computed go to, as in > > ipfw add 05000 skipto tablearg ip from any to me in recv em1 lookup src-ip > 23 > I use it to classify traffic based on country of origin. > Interesting. So given that table 23 has 1.2.3.4/24 6000 the rule would would be skipto 6000 ip from any to me in recv em1 src-ip 1.2.3.4/24 ? > > > Another question: While using tablearg, is there a way to get statistics > of > > each "individual" computed value instead of just the aggregate > statistics > > for all rules "generated" by the tablearg rule? > > you can log where the target rule is executed, or have a count rule. > > - M > Great, I'll look into that. Best regards Andreas
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAPS9%2BSuHTj-vmkUw56TwsFHWoudG0Hz_VPs%2BpS3ZHHofEUXqaw>