Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 18 Sep 2004 16:34:01 -0000 (GMT)
From:      "Hugo Silva" <klr@6s-gaming.com>
To:        freebsd-pf@freebsd.org, freebsd-questions@freebsd.org, freebsd-current@freebsd.org
Subject:   Re: pf not logging on 5.3-BETA3 ? [more info]
Message-ID:  <62049.81.84.174.8.1095525241.squirrel@81.84.174.8>
In-Reply-To: <200409180203.09842.max@love2party.net>
References:  <58653.81.84.174.8.1095267239.squirrel@81.84.174.8> <61203.81.84.174.8.1095446951.squirrel@81.84.174.8> <61210.81.84.174.8.1095447094.squirrel@81.84.174.8> <200409180203.09842.max@love2party.net>

next in thread | previous in thread | raw e-mail | index | archive | help

> On Friday 17 September 2004 20:51, Hugo Silva wrote:
>>  Did you put in "device pflog" as well? What does "$ifconfig pflog0"
>> say?
>>
>> [root@evilreborn:/home/klr]# ifconfig pflog0
>> pflog0: flags=41<UP,RUNNING> mtu 33208
>
> Okay, for some reason pflogd is *not* running! Otherwise you'd have pflog0
> in
> PROMIC mode:
>  pflog0: flags=141<UP,RUNNING,PROMISC> mtu 33208
> so we have to find out why it is not. Try starting it by hand and watch
> your
> daemon log closely. I can't reproduce the problem in any system (be it
> BETA3
> from disc, RELENG_5 or CURRENT) so I am afraid that something is wrong
> with
> your setup. Nontheless this *should* not happen ...
>
> If the problem is persistent, please file a PR reconstructing possible
> much
> information about how you got the system into the stage it is now (i.e.
> how
> did you install/update?). Thanks
>

Hey,

pflogd seems to start with the system (pf_logd set), but it exits. Same as
if I do it manually:

[root@evilreborn:/usr/local/etc/rc.d]# pflogd
[root@evilreborn:/usr/local/etc/rc.d]# ps aux | grep pflogd
root 14806  0.0  0.3   348  208  p0  R+    8:30PM   0:00.00 grep pflogd

[root@evilreborn:/usr/local/etc/rc.d]# which pflogd
/sbin/pflogd
[root@evilreborn:/usr/local/etc/rc.d]# file /sbin/pflogd
/sbin/pflogd: ELF 32-bit LSB executable, Intel 80386, version 1 (FreeBSD),
for FreeBSD 5.3, dynamically linked (uses shared libs), stripped

-

/var/log/messages shows this whenever i try to run pflogd:

Sep 18 20:31:47 evilreborn kernel: pflog0: promiscuous mode enabled
Sep 18 20:31:47 evilreborn kernel: pflog0: promiscuous mode disabled

Another oddity, I had to add ifconfig pflog0 up to a startup script to
make my pflog (read logs on pflog0 normally..) work, else it would
complain:

[root@evilreborn:/usr/local/etc/rc.d]# pflog
tcpdump: BIOCSETIF: pflog0: Network is down

I don't remember having to ifconfig pflog0 up on 5.2.1-RELEASE-p9 (another
server) with pf from ports.


I updated from 5.2.1-RELEASE (installed by cdrom) to RELENG_5 (BETA3 at
the time) by cvsup.

>> If more info is needed, let me know. I don't think this is an obvious
>> mistake of me (altough it could be, I haven't looked to this problem in
>> the last days, must take some time to look more carefully at it).
>>
>> As a reminder, the system is:
>> FreeBSD evilreborn 5.3-BETA3 FreeBSD 5.3-BETA3 #0: Wed Sep 15 19:18:51
>> WEST 2004
>> klr@evilreborn:/usr/src/sys/i386/compile/evilreborn53-kernel
>>  i386
>>
>> >> --
>> >> /"\  Best regards,                      | mlaier@freebsd.org
>> >> \ /  Max Laier                          | ICQ #67774661
>> >>  X   http://pf4freebsd.love2party.net/  | mlaier@EFnet
>> >> / \  ASCII Ribbon Campaign              | Against HTML Mail and News
>>
>> Best Regards,
>>
>> Hugo
>
> --
> /"\  Best regards,                      | mlaier@freebsd.org
> \ /  Max Laier                          | ICQ #67774661
>  X   http://pf4freebsd.love2party.net/  | mlaier@EFnet
> / \  ASCII Ribbon Campaign              | Against HTML Mail and News
>


-- 
www.6s-gaming.com



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?62049.81.84.174.8.1095525241.squirrel>