Date: Sun, 18 Dec 2005 23:19:14 -0500 From: Parv <parv@pair.com> To: f-q <freebsd-questions@freebsd.org> Subject: Re: Compacting the "pf -v -s rules" output similar to "ipfstat -ionh" Message-ID: <20051219041914.GA2544@holestein.holy.cow> In-Reply-To: <20051218213501.GA72282@holestein.holy.cow> References: <20051218213501.GA72282@holestein.holy.cow>
next in thread | previous in thread | raw e-mail | index | archive | help
in message <20051218213501.GA72282@holestein.holy.cow>, wrote Parv thusly... > > Before i write it myself, has anybody got a already prepared way > to compact the "pfctl -v -s rules" output ... > > pass in on lo0 all > [ Evaluations: 22188 Packets: 10925 Bytes: 8392463 States: 0 ] > pass out on lo0 all > [ Evaluations: 21850 Packets: 10925 Bytes: 8392463 States: 0 ] ... > ... to something like ... > > 22188 pass in on lo0 all > 21850 pass out on lo0 all ... I think i found /a solution/ in pflogd(8) man page via use of tcpdump. I just have to get used to pf way of doing things like use of bpf device & use of tcpdump to view rules statistics i suppose. Ugh! (but what else can i do if i will be using pf?) - Parv --
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20051219041914.GA2544>