IPFW2

[Matthew George]

On Mon, 22 Sep 2003, Luigi Rizzo wrote:

> On Mon, Sep 22, 2003 at 08:07:13PM +0200, Uwe Klann wrote:
> > Hi All,
> >
> > >From the Log file IPFW:-
> > "Sep 22 00:24:13 muc /kernel: ipfw: 3300 Accept TCP 217.10.213.30:4418
> > 217.9.121.209:21 in via fxp0"
> >
> > How can I extend on FreeBSD 4.8 (ipfw2) the log contens to see the tranfered
> > data File and the amount of bytes went out? Thank you in advance for your
>
> you can count the traffic with dynamic rules (but this does not go
> to the logfile), not sure what you mean by 'see the transfered data file'

from ipf(5):

LOGGING
       When a packet is logged, with either the  log  action  or  option, the
       headers  of  the  packet  are written to the ipl packet logging psuedo-
       device. Immediately following the log keyword, the following qualifiers
       may be used (in order):

       body   indicates  that  the first 128 bytes of the packet contents will
              be logged after the headers.

I don't believe there is a comparable ipfw option ...

>
> 	luigi
>
>
> >
> > Uwe
> >
> > Uwe Klann
> > Isensteinstr. 3
> > 80634 Munich
> > Germany
> > Mail: u.klann at t-online.de
> >
> >
> >
> > _______________________________________________
> > freebsd-hackers at freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> > To unsubscribe, send any mail to "freebsd-hackers-unsubscribe at freebsd.org"
> _______________________________________________
> freebsd-hackers at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> To unsubscribe, send any mail to "freebsd-hackers-unsubscribe at freebsd.org"
>

-- 
Matthew George
SecureWorks Technical Operations