Compacting the "pf -v -s rules" output similar to "ipfstat -ionh"

Parv parv at pair.com
Sun Dec 18 20:19:11 PST 2005


in message <20051218213501.GA72282 at holestein.holy.cow>,
wrote Parv thusly...
>
> Before i write it myself, has anybody got a already prepared way
> to compact the "pfctl -v -s rules" output ...
> 
>   pass in on lo0 all
>     [ Evaluations: 22188     Packets: 10925     Bytes: 8392463     States: 0     ]
>   pass out on lo0 all
>     [ Evaluations: 21850     Packets: 10925     Bytes: 8392463     States: 0     ]
...
> ... to something like ...
> 
>   22188 pass in on lo0 all
>   21850 pass out on lo0 all
...

I think i found /a solution/ in pflogd(8) man page via use of
tcpdump.  I just have to get used to pf way of doing things like use
of bpf device & use of tcpdump to view rules statistics i suppose.
Ugh! (but what else can i do if i will be using pf?)


  - Parv

-- 



More information about the freebsd-questions mailing list