how to use pflog with lagg device

[N. Ersen SISECI]

Hi,

There is a missing minus before ttt.

tcpdump -n -e -ttt -i pflog0

Necati.

2010/8/21 Free BSD <freebsd at vfemail.net>

> Dear List members
>
> I have a server using two different NICs as a LACP lagg device. as per the
> /etc/rc.conf file, the configuration is
>
> ifconfig_em0="up"
> ifconfig_re0="up"
> cloned_interfaces="lagg0"
> ifconfig_lagg0="laggproto lacp laggport em0 laggport re0"
> ipv4_addrs_lagg0="192.168.1.3/22"
>
> pflog_enable="YES"
> pflog_logfile="/var/log/pflog"
> pflog_program="/sbin/pflogd"
> pflog_flags=""
>
>
> and the ifconfig says
>
> em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
>
>  options=219b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4,WOL_MAGIC>
>        ether 00:22:19:1d:7b:a8
>        media: Ethernet autoselect (1000baseT <full-duplex>)
>        status: active
> re0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
>
>  options=389b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_UCAST,WOL_MCAST,WOL_MAGIC>
>        ether 00:22:19:1d:7b:a8
>        media: Ethernet autoselect (1000baseT <full-duplex>)
>        status: active
> plip0: flags=8810<POINTOPOINT,SIMPLEX,MULTICAST> metric 0 mtu 1500
> pflog0: flags=141<UP,RUNNING,PROMISC> metric 0 mtu 33200
> lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
>        options=3<RXCSUM,TXCSUM>
>        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5
>        inet6 ::1 prefixlen 128
>        inet 127.0.0.1 netmask 0xff000000
>        nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
> pfsync0: flags=0<> metric 0 mtu 1460
>        syncpeer: 224.0.0.240 maxupd: 128
> enc0: flags=0<> metric 0 mtu 1536
> vboxnet0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> metric 0 mtu 1500
>        ether 0a:00:27:00:00:00
> lagg0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
>
>  options=209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC>
>        ether 00:22:19:1d:7b:a8
>        inet 192.168.1.3 netmask 0xfffffc00 broadcast 192.168.3.255
>        media: Ethernet autoselect
>        status: active
>        laggproto lacp
>        laggport: re0 flags=1c<ACTIVE,COLLECTING,DISTRIBUTING>
>        laggport: em0 flags=1c<ACTIVE,COLLECTING,DISTRIBUTING>
>
>
> However, if I try to view the log, it says
>
> tcpdump -n -e ttt -i pflog0
> tcpdump: WARNING: em0: no IPv4 address assigned
> tcpdump: syntax error
>
> I have also tried with -i lagg0, and the same error was generated. I'm not
> sure if I'm doing something wrong. I went through the FB handbook as much as
> I could, also googled around -- no luck.
>
> Any pointer / suggestion is welcom.
>
> Thanks.
>
>
>
>
> -------------------------------------------------
> This message sent via VFEmail.net
> http://www.vfemail.net
> $14.95 Lifetime accounts - 1GB disk, No bandwidth quotas!
>
> _______________________________________________
> freebsd-pf at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "freebsd-pf-unsubscribe at freebsd.org"
>



-- 
N. Ersen SISECI
http://www.enderunix.org