pfctl and verbosely listing tables not giving full output on 9.x

Philip Kizer pckizer at nostrum.com
Tue May 28 17:08:57 UTC 2013


On some of my older systems, I try and view some tables verbosely as the manual describes:

             We can now use the table show command to output, for each address
             and packet direction, the number of packets and bytes that are
             being passed or blocked by rules referencing the table.  The time
             at which the current accounting started is also shown with the
             ``Cleared'' line.

                   # pfctl -t test -vTshow
                      129.128.5.191
                       Cleared:     Thu Feb 13 18:55:18 2003
                       In/Block:    [ Packets: 0        Bytes: 0        ]
                       In/Pass:     [ Packets: 10       Bytes: 840      ]
                       Out/Block:   [ Packets: 0        Bytes: 0        ]
                       Out/Pass:    [ Packets: 10       Bytes: 840      ]

and I get what I would expect when I issue the command:

# uname -r
8.3-RELEASE-p3
# pfctl -t spam -vTshow
No ALTQ support in kernel
ALTQ related functions disabled
   61.156.238.56
        Cleared:     Mon May 27 16:06:03 2013
        In/Block:    [ Packets: 23                 Bytes: 1673               ]
        In/Pass:     [ Packets: 0                  Bytes: 0                  ]
        Out/Block:   [ Packets: 0                  Bytes: 0                  ]
        Out/Pass:    [ Packets: 0                  Bytes: 0                  ]
   101.44.1.135
        Cleared:     Tue May 28 11:14:23 2013
        In/Block:    [ Packets: 21                 Bytes: 1520               ]
        In/Pass:     [ Packets: 0                  Bytes: 0                  ]
        Out/Block:   [ Packets: 0                  Bytes: 0                  ]
        Out/Pass:    [ Packets: 0                  Bytes: 0                  ]

All of my newer systems seem to not be showing me the data I expect:

# uname -rm
9.1-RELEASE-p3 amd64
# pfctl -t spam -vTshow
No ALTQ support in kernel
ALTQ related functions disabled
   46.21.161.37
        Cleared:     Tue May 14 10:37:11 2013
   46.29.248.152
        Cleared:     Sat May 25 03:47:26 2013
   46.165.236.153
        Cleared:     Tue May 14 06:12:05 2013
[...]

# uname -rm
9.1-RELEASE i386
# pfctl -t spam -vTshow
No ALTQ support in kernel
ALTQ related functions disabled
   1.235.138.249
        Cleared:     Sat Apr 27 19:55:15 2013
   27.50.140.140
        Cleared:     Fri Apr 26 13:43:11 2013
   31.3.245.178
        Cleared:     Tue Apr 30 19:30:29 2013
[...]

# uname -rm
9.1-RELEASE amd64
# pfctl -t spam -vTshow
No ALTQ support in kernel
ALTQ related functions disabled
   46.29.248.152
        Cleared:     Sat May 25 03:49:12 2013
   50.73.11.52
        Cleared:     Wed May 22 01:57:10 2013
   61.132.228.240
        Cleared:     Sun May 19 23:46:07 2013

Can anyone confirm similar behaviour on their systems, or has anyone even tried?  I didn't see any active PRs about this.


Thanks,
Philip



More information about the freebsd-questions mailing list