Timestamp on packets?

[Max Laier]

On Tuesday 11 January 2005 04:44, Forrest Aldrich wrote:
> After reading through the manpage for pfctl, I wonder if there's a
> mechanism/equivalent for PF that shows the timestamp of the last "hit"
> on a rule... similar to "ipfw -t"...?

No, there is no such functionality.  In fact, we don't even store such data in 
the rules.  For rules that create state, you can check the output of "$pfctl 
-vvss" for the newest state for a certain rule.  For rules that do logging, 
you can check /var/log/pflog for the last packet logged.

I don't really see the point in this information.  Why do you want to know 
this?  Can you explain a bit - it's certainly not difficult to implement.

-- 
/"\  Best regards,                      | mlaier at freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier at EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20050112/3d963811/attachment.bin