Ask a Question related to FreeBSD, Design and Development.

  1. #1

    Default pflog's format

    Hello

    when reading pf's log the messages usually have the following format:


    189977 rule 0/0(match): block out on ste0: IP (tos 0x0, ttl 63, id
    38539, offse t 0, flags [DF], length: 40)

    Instead of "xxxxxx number rule" how can I get date and time
    displayed/logged ?

    Thank you



    kilim Guest

  2. Similar Questions and Discussions

    1. MXI Format
      Well the Adobe documentation does little to demonstrate the proper structure of an MXI document. Is there even a single example of one and how they...
    2. Placing an image in a Tab Fixed format without messing up the format??
      I will do my best to explain the problem. First of all, this is an XP machine and I am using CS InDesign (the version of InDesign that one can...
    3. Web format
      As far as images are concerned, you really can't. Unless you keep everything smaller than 640x480 to accomodate anyone still running in that mode....
    4. .dds format
      * .dds, as in "DirectDrawSurface (for 3D applications)? Or did you mean (through either typos or lack of understanding) *.psd, the standard suffix...
    5. format number into currency format ($1,000,000.00)
      SELECT '$' + CONVERT(VARCHAR, CONVERT(MONEY, 1000000), 1) "lamP" <phantlam@yahoo.com> wrote in message...
  3. #2

    Default Re: pflog's format

    On 2005-02-25 16:28, kilim <kilim@phenix.rootshell.be> wrote:
    > when reading pf's log the messages usually have the following format:
    >
    > 189977 rule 0/0(match): block out on ste0: IP (tos 0x0, ttl 63, id
    > 38539, offse t 0, flags [DF], length: 40)
    >
    > Instead of "xxxxxx number rule" how can I get date and time
    > displayed/logged ?
    Try using tcpdump with the proper options on `/var/log/pflog':

    # Wrapped under 80 columns output...

    orion:/root# tcpdump -tttt -n -v -r /var/log/pflog | head -5
    reading from file /var/log/pflog, link-type PFLOG (OpenBSD pflog file)
    2005-01-10 16:32:54.010282 IP (tos 0x0, ttl 1, id 17146, offset 0, flags
    [none], length: 40, optlength: 4 ( RA )) 10.6.0.201 > 224.0.0.22: igmp v3
    report, 1 group record(s) [gaddr 224.0.0.252 to_ex, 0 source(s)]
    2005-01-10 16:32:54.687811 IP (tos 0x0, ttl 1, id 17156, offset 0, flags
    [none], length: 40, optlength: 4 ( RA )) 10.6.0.201 > 224.0.0.22: igmp v3
    report, 1 group record(s) [gaddr 224.0.0.252 to_ex, 0 source(s)]
    2005-01-10 16:33:24.011554 IP (tos 0x0, ttl 1, id 17218, offset 0, flags
    [none], length: 40, optlength: 4 ( RA )) 10.6.0.201 > 224.0.0.22: igmp v3
    report, 1 group record(s) [gaddr 224.0.0.252 to_in, 0 source(s)]
    2005-01-10 16:33:24.723533 IP (tos 0x0, ttl 1, id 17219, offset 0, flags
    [none], length: 40, optlength: 4 ( RA )) 10.6.0.201 > 224.0.0.22: igmp v3
    report, 1 group record(s) [gaddr 224.0.0.252 to_in, 0 source(s)]
    2005-01-19 11:05:24.429801 IP (tos 0x0, ttl 1, id 22604, offset 0, flags
    [none], length: 40, optlength: 4 ( RA )) 10.6.0.202 > 224.0.0.22: igmp v3
    report, 1 group record(s) [gaddr 224.0.0.252 to_in, 0 source(s)]

    Giorgos Keramidas Guest

Posting Permissions

  • You may not post new threads
  • You may post replies
  • You may not post attachments
  • You may not edit your posts

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139