Pfstat trouble, no data in database file

[Lars Wittebrood]

Thank you very much Max. The patch did the trick for me.

Regards,
Lars. 

-----Original Message-----
From: Max Laier [mailto:max at love2party.net] 
Sent: Monday, December 11, 2006 9:10 PM
To: freebsd-ports at freebsd.org
Cc: Lars Wittebrood
Subject: Re: Pfstat trouble, no data in database file

On Monday 11 December 2006 20:29, Lars Wittebrood wrote:
> Hello list,
>
> After some more troubleshooting I've come a step further.
>
> I have run the '/usr/local/bin/pfstat -q' command from a shell and 
> found some problems with my /usr/local/etc/pfstat.conf file. After 
> solving these problems I get the following message issueing the 
> '/usr/local/bin/pfstat -q' command:
>
> root at servername etc # /usr/local/bin/pfstat -q
> ioctl: DIOCGETALTQS: Operation not supported by device
> pf_query: query_queues() failed
>
> I couldn't find anything usefull on these strings via Google.
>
> Any help is much appreciated.

pfstat 2.2 seems to assume that ALTQ support is enabled in the kernel.  
For now the only way to work around your problem seems to be to build a
kernel with ALTQ support.  Alternatively you can replace
files/patch-pf.c in sysutils/pfstat with the attached and rebuild
pfstat.

> MTIA
>
> Cheers,
> Lars.
>
> > _____________________________________________
> > From: 	Lars Wittebrood
> > Sent:	Sunday, December 10, 2006 9:51 PM
> > To:	'freebsd-ports at freebsd.org'
> > Subject:	Pfstat trouble, no data in database file
> >
> > Hello list,
> >
> > I've installed and configure the Pfstat port on a FreeBSD 6.1 
> > RELEASE system acting as a firewall based on PF.
> >
> > FreeBSD servername 6.1-RELEASE-p10 FreeBSD 6.1-RELEASE-p10 #0: Fri
> > Nov 24 13:33:18 CET 2006    
> > root at servername:/usr/obj/usr/src/sys/ALPHA i386
> >
> > The trouble I have is that I get no data at all in the Pfstat data 
> > file!
> >
> > My Pfstat /etc/crontab entries
> > #
> > # Gather Pfstat output continually
> > *       *       *       *       *       root
/usr/local/bin/pfstat
> > -q >> /var/db/pfstat.db
> > #
> > # Generate Pfstat graphs every 5 minutes
> > */5     *       *       *       *       root
/usr/local/bin/pfstat
> > -c /etc/pfstat.conf -d /var/db/pfstat.db # # Glean old Pfstat data
> > 1       1       1       *       *       root
/usr/local/bin/pfstat
> > -t 31:365
> >
> > Entries from my cron log:
> > Dec 10 21:40:00 servername /usr/sbin/cron[39679]: (root) CMD (
> > /usr/libexec/atrun)
> > Dec 10 21:41:00 servername /usr/sbin/cron[502]: (*system*) RELOAD
> > (/etc/crontab)
> > Dec 10 21:41:00 servername /usr/sbin/cron[39687]: (root) CMD 
> > (/usr/local/bin/pfstat -q >> /var/db/pfstat.db) Dec 10 21:42:00 
> > servername /usr/sbin/cron[39696]: (root) CMD (/usr/local/bin/pfstat 
> > -q >> /var/db/pfstat.db) Dec 10 21:43:00 servername 
> > /usr/sbin/cron[39701]: (root) CMD (/usr/local/bin/pfstat -q >> 
> > /var/db/pfstat.db) Dec 10 21:44:00 servername /usr/sbin/cron[39714]:

> > (root) CMD (/usr/local/bin/pfstat -q >> /var/db/pfstat.db) Dec 10 
> > 21:44:00 servername /usr/sbin/cron[39715]: (operator) CMD
> > (/usr/libexec/save-entropy)
> > Dec 10 21:45:00 servername /usr/sbin/cron[39734]: (root) CMD 
> > (/usr/local/bin/pfstat -q >> /var/db/pfstat.db) Dec 10 21:45:00 
> > servername /usr/sbin/cron[39735]: (root) CMD (
> > /usr/libexec/atrun)
> > Dec 10 21:45:00 servername /usr/sbin/cron[39733]: (root) CMD 
> > (/usr/local/bin/pfstat -c /etc/pfstat.conf -d /var/db/pfstat.db)
> >
> > root at servername db # ll /var/db/pfstat.db
> > -rw-r--r--    1 root     wheel           0 Dec 10 21:21
> > /var/db/pfstat.db
> >
> > As you can see pfstat.db stays zero bytes! Anyone any idea why this 
> > is happening? My /etc/pf.conf has a set loginterface entry!
> >
> > MTIA.
> >
> > Cheers,
> > Lars.
>
> _______________________________________________
> freebsd-ports at freebsd.org mailing list 
> http://lists.freebsd.org/mailman/listinfo/freebsd-ports
> To unsubscribe, send any mail to
> "freebsd-ports-unsubscribe at freebsd.org"

-- 
/"\  Best regards,                      | mlaier at freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier at EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News