From owner-freebsd-pf@FreeBSD.ORG Tue May 13 23:55:33 2008 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 43330106564A for ; Tue, 13 May 2008 23:55:33 +0000 (UTC) (envelope-from tom@uffner.com) Received: from eris.uffner.com (eris.uffner.com [207.245.121.212]) by mx1.freebsd.org (Postfix) with ESMTP id F2AB08FC13 for ; Tue, 13 May 2008 23:55:32 +0000 (UTC) (envelope-from tom@uffner.com) Received: from xiombarg.uffner.com (static-71-162-143-94.phlapa.fios.verizon.net [71.162.143.94]) (authenticated bits=0) by eris.uffner.com (8.14.2/8.14.2) with ESMTP id m4DNtRAM002890 for ; Tue, 13 May 2008 19:55:32 -0400 (EDT) (envelope-from tom@uffner.com) DomainKey-Signature: a=rsa-sha1; s=eris; d=uffner.com; c=nofws; q=dns; h=message-id:date:from:to:subject; b=li+RbS1KTfXjuYVa5PQ4Ov9SGeoqm28268nVlpbcSXhdZxgOEDTdM/OtWUhCN2wGL RI3FDv3zUURoeC95rvB+Q== Message-ID: <482A2A6F.9060000@uffner.com> Date: Tue, 13 May 2008 19:55:27 -0400 From: Tom Uffner User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.1.13) Gecko/20080430 SeaMonkey/1.1.9 MIME-Version: 1.0 To: freebsd-pf@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Greylist: Sender succeeded SMTP AUTH authentication, not delayed by milter-greylist-3.0 (eris.uffner.com [192.168.1.212]); Tue, 13 May 2008 19:55:32 -0400 (EDT) X-Virus-Scanned: ClamAV 0.92.1/7106/Tue May 13 04:20:52 2008 on eris.uffner.com X-Virus-Status: Clean Subject: understanding pfctl state table output X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 May 2008 23:55:33 -0000 is there documentation somewhere (other than reading the source code) of exactly what all of the fields in the output from "pfctl -ss" (and "pfctl -vvvgss") mean, and all of the possible values. most of it seems pretty obvious, but it would still be nice to have a way to be sure i'm not misinterpreting things. thanks, tom