[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: pf problems



FYI you can use anything that can snag packets from an interface. 
Personaly I like Ethereal. Make sure you set your options to display the 
link level header if you use tcpdump.

Nuno Branco wrote:

> yes. use tcpdump, the pflog0 device and the "log" keyword in the pf
> config file
> 
> On Wed, 2003-10-15 at 16:44, Daniel Corbe wrote:
> 
>>I'm having problems getting pf to work properly.  is there a way to "debug"
>>it?  IE watch packets as they traverse the firewall and see which
>>rules/states they match?
>>
>>
>>--
>>Daniel Corbe, CCNA		tel +1 954-921-2400 x104
>>Senior Network Engineer		dcorbe@resultstel.com
>>Results Technologies		http://www.resultstel.com
>>Dania Beach, FL
>>
> 
> --
> 
> Best Regards,
> Nuno Branco - Network Administrator
> 
> 
> Markdata
> R. Luis Padre Aparicio N.º 10 - 5º
> Lisboa - Portugal
> Tel: +351 21 317 34 00 FAX: +351 21 315 50 46
> 
> http://www.markdata.net
> 
> [demime 0.98d removed an attachment of type application/pgp-signature which had a name of signature.asc]
> 
> 

-- 
Christopher Ingram
   cmi@crystalsands.net
   Member of http://www.lineman.net