[pf4freebsd] Re: [patch] NOINET6 ; port numbers

[Michael O. Boev]

----- Original Message -----
From: "Max Laier" <max at love2party.net>
To: "Michael O. Boev" <mike at tric.tomsk.gov.ru>
Cc: <pf4freebsd at freelists.org>
Sent: Thursday, October 09, 2003 9:46 PM
Subject: Re: [pf4freebsd] [patch] NOINET6 ; port numbers


> Hello Michael,
...
>
> MOB> P.S. pftcpdump doesn't show tcp/udp ports. It prints colons after
> MOB> destination,
> MOB> but no number after it. It prints nothing after source address.
>
> MOB> gw# pftcpdump -i pflog0
> MOB> pftcpdump: WARNING: pflog0: no IPv4 address assigned
> MOB> pftcpdump: listening on pflog0
> MOB> 20:30:20.670224 213.183.101.200 > 213.183.101.207: [|udp]
> MOB> 20:30:32.168202 200-171-18-234.speedyterra.com.br >
1.tric.tomsk.gov.ru:
> MOB> [|tcp] (DF) [tos 0x20]
>
> Hum ... I get the portnumbers correctly. Note that the print-udp.c is an
> unmodified copy from 5.1R and hence it should work as the normal tcpdump
> you have from your default installation. Output of pftcpdump -in pflog0
> would look like:
>
> "16:37:04.203063 80.144.56.177.36068 > 80.131.152.57.4662: ..."
>
> Note that the port number is separated by another dot not a colon as you
> expected. Can you please check if the normal tcpdump (on a normal
> interface) prints portnumbers?
Indeed, sorry for confusion about that colon.
BTW, normal tcpdump works fine on my 5.1R installation.
>
> MOB> Am I missing something?
>
> Yes, the portnumbers ... obviously ;) I'll investigate.
>
Thanks for your interest!
> --
> Best regards,
>  Max                            mailto:max at love2party.net
>
>