Trouble with ipfstat

JJB Barbish3 at adelphia.net
Fri Aug 20 07:09:41 PDT 2004


owner-freebsd-questions at freebsd.org wrote:
>    Hi,
>    I have installed freebsd 4.10 (i386) with ipfilter firewall.
When
>    I do a cvsup, compile kernel, install and restart with new
kernel,
>    I have trouble with "ipfstat -t" output. The source and
>    destination ip address are a bunch of zeroes and not the
actuals.
>    "ipfstat -t" works well before running cvsup and kernel
>    compilation. I have included dump various commands down in this
>    mail. Advance thanks for the help !
>    badri
>
>
>    Sys53# uname -a
>    FreeBSD Sys53.softland.co.in 4.10-STABLE FreeBSD 4.10-STABLE
#1:
>    Wed Aug 18 16:50:36 IST 2004
>
>    Sys53# ipf -V
>    ipf: IP Filter: v3.4.31 (336)
>    Kernel: IP Filter: v3.4.35
>    Running: yes
>    Log Flags: 0 = none set
>    Default: block all, Logging: available
>    Active list: 1
>    Sys53#ipfstat -t
>
>    Sys53.softland.co.in - IP Filter: v3.4.31 - state top
>    12:32:04
>    Src = 0.0.0.0  Dest = 0.0.0.0  Proto = any  Sorted by = # bytes
>    Source IP             Destination IP         ST   PR   #pkts
>    #bytes       ttl
>    0.0.0.0               0.0.0.0               50/1D   ip   10580
>    8836110   -20:-
>    0.0.0.0               0.0.0.0               70/44   ip   20024
>    6037334   -20:-
>    0.0.0.0               0.0.0.0               70/44 &nb sp; ip
>    15334 4984190   -20:-
>    0.0.0.0               0.0.0.0               70/44   ip   14494
>    4736824   -20:-
>    0.0.0.0               0.0.0.0               70/44   ip   12714
>    4153774   -20:-
>    0.0.0.0               0.0.0.0               20/19   ip    1166
>    1135134   -20:-
>    0.0.0.0               0.0.0.0    &nb sp;          70/44   ip
>    2284    675230   -20:-
>    0.0.0.0               0.0.0.0               70/44   ip    2278
>    674894   -20:-
>
_________________________________________________________________
>
>    Block annoying pop ups! Empower your search! [1]Enrich your
>    internet experience!
>
> References
>
>    1. http://g.msn.com/8HMBENIN/2746??PS=47575
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe at freebsd.org"

The ipfstat -t command works fine for me. I installed 4.10 from
downloaded .iso image. I do not have ipf compiled into kernel but
instead use the loadable module. ipf -V command says I am using
ipfilter v3.4.31 in kernel.  Your ipf -V says ipfilter v3.4.35 in
kernel. This may be the cause of your problem. Try recompiling your
kernel without ipfilter included and the ipfilter loadable module
will be automatically loaded by rc.conf ipfilter_enable="YES"
statement on reboot. If this fixes your problem, them please submit
bug report.




More information about the freebsd-questions mailing list