pflog summary script?

[Giorgos Keramidas]

On 2005-11-24 19:33, JD Bronson <jbronson at wixb.com> wrote:
> Does anyone have a simple shell/perl script that can take
> /var/log/pflog and parse it into a simple txt or html?
>
> I would like to cron a script that can clean up the output of pflog
> and put it into something more readable...
>
> Basically something that looks like:
>
> Time - SourceIP - Destination Port
>
> or a count of these as well.

I think what you want is something like the scripts included in these posts:

http://keramida.serverhive.com/weblog/archives/2004-12-28/switching-from-ipfilter-to-pf
http://keramida.serverhive.com/weblog/archives/2005-01-04/more-fun-with-the-pf9-firewall

They are far from perfect and definitely not what I'd call "production
quality", but they will serve fine as a starting point while you write
your own, I guess ;)