From owner-freebsd-net@freebsd.org  Wed Mar  2 13:35:49 2016
Return-Path: <owner-freebsd-net@freebsd.org>
Delivered-To: freebsd-net@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2568EABF338
 for <freebsd-net@mailman.ysv.freebsd.org>;
 Wed,  2 Mar 2016 13:35:49 +0000 (UTC)
 (envelope-from raitech@gmail.com)
Received: from mail-oi0-x229.google.com (mail-oi0-x229.google.com
 [IPv6:2607:f8b0:4003:c06::229])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id E3D861998
 for <freebsd-net@freebsd.org>; Wed,  2 Mar 2016 13:35:48 +0000 (UTC)
 (envelope-from raitech@gmail.com)
Received: by mail-oi0-x229.google.com with SMTP id d205so70169639oia.0
 for <freebsd-net@freebsd.org>; Wed, 02 Mar 2016 05:35:48 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=mime-version:from:date:message-id:subject:to;
 bh=fMXguSPoCM+yLR5ODb5Q1nVKpvtnQUy1KRgGSosembw=;
 b=i8P92f8flzd7qy34hrF2FBNS3s3f8tg+Fx3CA0coAvpASPeFUK/p1qCd6jw5PSvNHp
 hcNzoaZ1lmmd5GYASfiCpDm9Die48nvP+U3vFgy8NcsY4F6V5jo1NGBom7iA8HwwctXC
 RlCE0dPihAusLjzIxW8yCJMZp/BvMcAvStslY6whs+i1nW6B3i8vGORRpRPRho8e2Gqp
 aTEy/lObI2ttwNOAMBSp3Ii3pTJ/KZgRjbr5/XQo/DDkFHUqYu3D7XBS35EDps3EcTaJ
 OHeI+kOoANcF8MD3rNrrUnGnI8A3SF8Cp//wWZG2uXngCs0KX5wrbgBEs7stpgmw/53G
 iFGg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
 bh=fMXguSPoCM+yLR5ODb5Q1nVKpvtnQUy1KRgGSosembw=;
 b=c92Pw6UJXq3rmPlcCUCrM0EnhvZ6oKZi2n6ChtitXVw6FDEklv/GmwW7SJAzQjmI6O
 Fy/tzkIkoSnaPWvPmgvN3UZdHFoci8inc4D1T860vv6ldC9g7Opj3FHPu7BN4p+w9jA1
 civWsmoEmloCxn3D2hiHe7PvK0FhuO5KwnUHSJOc6qeZ6eia1rHgiJmPHEMT6cT3GeST
 M3jCL+ZerCH8016GyzZic99ZFu3wcA2HEONk4RDFQuY23mx5kNi/DnOvoVJRsjDHPq4H
 Bcivp3lZflW47+eMG/v2IEFPm4mlcUf+5hBy68UUGrno+bQ1zqlmOmS7LrO/DgpJckwY
 H8Rw==
X-Gm-Message-State: AD7BkJITo+lN29Oq2uPhBLbSRuUsKtlk/0lYzmtBL1Vklbc2EdkGLkocKVTj9YXmKnuHWCpSfNVkQxkkSyCLcw==
X-Received: by 10.202.68.130 with SMTP id r124mr20408283oia.105.1456925748186; 
 Wed, 02 Mar 2016 05:35:48 -0800 (PST)
MIME-Version: 1.0
Received: by 10.76.167.34 with HTTP; Wed, 2 Mar 2016 05:35:28 -0800 (PST)
From: Raimundo Santos <raitech@gmail.com>
Date: Wed, 2 Mar 2016 10:35:28 -0300
Message-ID: <CAGQ6iC9yuh0-geqmuJ1oY5OA9GkrLUAOdLhR++LpgSPBYZ7u5Q@mail.gmail.com>
Subject: How to log NATed addresses with ipfw and in-kernel libalias?
To: "freebsd-net@freebsd.org" <freebsd-net@freebsd.org>
Content-Type: text/plain; charset=UTF-8
X-Content-Filtered-By: Mailman/MimeDel 2.1.20
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net/>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Mar 2016 13:35:49 -0000

Hello all!

I need to log NATed connections/addresses with ipfw and in-kernel libalias.

Have someone done that? I can't find much doc about it, only a wish of
ng_netflow doing that for CGNAT, what is very close to my needs.

I'm not versed in kernel programming, but having a look at libalias code
don't gave me any clues where to know original address and nated address
with AliasLog.

Maybe an userland code could read this information? If yes, what would be
the directions to follow?

Thank you for your time,
Raimundo Santos