kern/129103: IPFW check state does not work =(

[KES]

The following reply was made to PR kern/129103; it has been noted by GNATS.

From: KES <kes-kes at yandex.ru>
To: FreeBSD-gnats-submit at FreeBSD.org
Cc: freebsd-bugs at FreeBSD.org
Subject: Re[2]: kern/129103: IPFW check state does not work =(
Date: Mon, 24 Nov 2008 00:34:43 +0200

 whith
 ipfw add 1 check-state log
 
 Nov 24 00:28:40 home kernel: ipfw: 1 UNKNOWN ICMP:8.0 192.168.9.4 213.180.204.8 in via ng1
 Nov 24 00:28:40 home kernel: ipfw: 1 UNKNOWN ICMP:8.0 192.168.9.4 213.180.204.8 out via ng0
 Nov 24 00:28:40 home kernel: ipfw: 2 Count ICMP:8.0 192.168.9.4 213.180.204.8 out via ng0
 Nov 24 00:28:40 home kernel: ipfw: 3 SkipTo 6 ICMP:8.0 192.168.9.4 213.180.204.8 out via ng0
 Nov 24 00:28:40 home kernel: ipfw: 6 SkipTo 7 ICMP:8.0 192.168.9.4 213.180.204.8 out via ng0
 Nov 24 00:28:40 home kernel: ipfw: 7 Count ICMP:8.0 192.168.9.4 213.180.204.8 out via ng0
 Nov 24 00:28:40 home kernel: ipfw: 10 Count ICMP:8.0 192.168.9.4 213.180.204.8 out via ng0
 Nov 24 00:28:40 home kernel: ipfw: 1 UNKNOWN ICMP:0.0 213.180.204.8 91.124.239.145 in via ng0
 Nov 24 00:28:40 home kernel: ipfw: 2 Count ICMP:0.0 213.180.204.8 91.124.239.145 in via ng0
 Nov 24 00:28:40 home kernel: ipfw: 4 SkipTo 5 ICMP:0.0 213.180.204.8 91.124.239.145 in via ng0
 Nov 24 00:28:40 home kernel: ipfw: 5 SkipTo 10 ICMP:0.0 213.180.204.8 91.124.239.145 in via ng0
 Nov 24 00:28:40 home kernel: ipfw: 10 Count ICMP:0.0 213.180.204.8 91.124.239.145 in via ng0
 Nov 24 00:28:40 home kernel: ipfw: 1 UNKNOWN ICMP:0.0 213.180.204.8 192.168.9.4 out via ng1
 Nov 24 00:28:40 home kernel: ipfw: 6 SkipTo 7 ICMP:0.0 213.180.204.8 192.168.9.4 out via ng1
 Nov 24 00:28:41 home kernel: ipfw: 1 UNKNOWN ICMP:8.0 192.168.9.4 213.180.204.8 in via ng1
 Nov 24 00:28:41 home kernel: ipfw: 6 SkipTo 7 ICMP:8.0 192.168.9.4 213.180.204.8 in via ng1
 Nov 24 00:28:41 home kernel: ipfw: 1 UNKNOWN ICMP:8.0 192.168.9.4 213.180.204.8 out via ng0
 Nov 24 00:28:41 home kernel: ipfw: 6 SkipTo 7 ICMP:8.0 192.168.9.4 213.180.204.8 out via ng0
 Nov 24 00:28:41 home kernel: ipfw: 7 Count ICMP:8.0 192.168.9.4 213.180.204.8 out via ng0
 Nov 24 00:28:41 home kernel: ipfw: 10 Count ICMP:8.0 192.168.9.4 213.180.204.8 out via ng0
 Nov 24 00:28:41 home kernel: ipfw: 1 UNKNOWN ICMP:0.0 213.180.204.8 91.124.239.145 in via ng0
 Nov 24 00:28:41 home kernel: ipfw: 4 SkipTo 5 ICMP:0.0 213.180.204.8 91.124.239.145 in via ng0
 Nov 24 00:28:41 home kernel: ipfw: 5 SkipTo 10 ICMP:0.0 213.180.204.8 91.124.239.145 in via ng0
 Nov 24 00:28:41 home kernel: ipfw: 10 Count ICMP:0.0 213.180.204.8 91.124.239.145 in via ng0
 Nov 24 00:28:41 home kernel: ipfw: 1 UNKNOWN ICMP:0.0 213.180.204.8 192.168.9.4 out via ng1
 Nov 24 00:28:41 home kernel: ipfw: 6 SkipTo 7 ICMP:0.0 213.180.204.8 192.168.9.4 out via ng1
 Nov 24 00:28:42 home kernel: ipfw: 1 UNKNOWN ICMP:8.0 192.168.9.4 213.180.204.8 in via ng1
 Nov 24 00:28:42 home kernel: ipfw: 6 SkipTo 7 ICMP:8.0 192.168.9.4 213.180.204.8 in via ng1
 Nov 24 00:28:42 home kernel: ipfw: 1 UNKNOWN ICMP:8.0 192.168.9.4 213.180.204.8 out via ng0
 Nov 24 00:28:42 home kernel: ipfw: 6 SkipTo 7 ICMP:8.0 192.168.9.4 213.180.204.8 out via ng0
 Nov 24 00:28:42 home kernel: ipfw: 7 Count ICMP:8.0 192.168.9.4 213.180.204.8 out via ng0
 Nov 24 00:28:42 home kernel: ipfw: 10 Count ICMP:8.0 192.168.9.4 213.180.204.8 out via ng0
 Nov 24 00:28:42 home kernel: ipfw: 1 UNKNOWN ICMP:0.0 213.180.204.8 91.124.239.145 in via ng0
 Nov 24 00:28:42 home kernel: ipfw: 4 SkipTo 5 ICMP:0.0 213.180.204.8 91.124.239.145 in via ng0
 Nov 24 00:28:42 home kernel: ipfw: 5 SkipTo 10 ICMP:0.0 213.180.204.8 91.124.239.145 in via ng0
 Nov 24 00:28:42 home kernel: ipfw: 10 Count ICMP:0.0 213.180.204.8 91.124.239.145 in via ng0
 Nov 24 00:28:42 home kernel: ipfw: 1 UNKNOWN ICMP:0.0 213.180.204.8 192.168.9.4 out via ng1
 Nov 24 00:28:42 home kernel: ipfw: 6 SkipTo 7 ICMP:0.0 213.180.204.8 192.168.9.4 out via ng1
 
 00001    0      0 check-state log
 Counter does not count, so check-state does not work, does not?