From owner-freebsd-net@FreeBSD.ORG  Fri Nov 13 16:15:36 2009
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id D9241106566B
	for <net@freebsd.org>; Fri, 13 Nov 2009 16:15:36 +0000 (UTC)
	(envelope-from gigabyte.tmn@gmail.com)
Received: from ey-out-2122.google.com (ey-out-2122.google.com [74.125.78.26])
	by mx1.freebsd.org (Postfix) with ESMTP id 644B08FC24
	for <net@freebsd.org>; Fri, 13 Nov 2009 16:15:36 +0000 (UTC)
Received: by ey-out-2122.google.com with SMTP id 9so936055eyd.9
	for <net@freebsd.org>; Fri, 13 Nov 2009 08:15:35 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:received:received:message-id:reply-to:from:to
	:cc:references:subject:date:organization:mime-version:content-type
	:content-transfer-encoding:x-priority:x-msmail-priority:x-mailer
	:x-mimeole; bh=CdVCplx8MzIPvMku361IVjbHwfo4DbG7WmjUshIEAsg=;
	b=Owu8Z8YO6xukfOFpQbRojLHRUuUz88vTzzT+qtsxD75vNLfRO9VgpWdyKRlw2w3wc6
	TuOCska8zoSER4E7IwRfMjWBFdtKjLxfwoa9+EVOHynTZscEVhNPtX6Vt8FVi9dl1iKb
	snC4fCgvmXCuW+2vQ6OHdBrCj0DcDXFToXNzk=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=message-id:reply-to:from:to:cc:references:subject:date:organization
	:mime-version:content-type:content-transfer-encoding:x-priority
	:x-msmail-priority:x-mailer:x-mimeole;
	b=ETeGg6EZHftWTDYbXljHHL6lgESfHRTK52coHS8kR666kJuEZ9ysvsv/qxi+OAgVSq
	x+5+lts3JPFVqTfAIS/TTGyQlZyim1zD65oV84O3zoG1KKK2gP5GkEwd+uj9eKTyU3Kt
	/AOqpA+K1FYW3wLg0LzRmY1SrBppKNnkXasPI=
Received: by 10.213.100.168 with SMTP id y40mr3214993ebn.77.1258127614966;
	Fri, 13 Nov 2009 07:53:34 -0800 (PST)
Received: from dm ([91.211.194.107])
	by mx.google.com with ESMTPS id 10sm1666412eyz.43.2009.11.13.07.53.33
	(version=SSLv3 cipher=RC4-MD5); Fri, 13 Nov 2009 07:53:34 -0800 (PST)
Message-ID: <002401ca6479$7e2031e0$1e010a0a@in72.ru>
From: "Dmitriy Zamuraev" <gigabyte.tmn@gmail.com>
To: "Stephane D'Alu" <sdalu@sdalu.com>
References: <4AFD4632.5090207@sdalu.com>
Date: Fri, 13 Nov 2009 20:53:47 +0500
Organization: Netline NSP
MIME-Version: 1.0
Content-Type: text/plain; format=flowed; charset="ISO-8859-1";
	reply-type=response
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
Cc: net@freebsd.org
Subject: Re: pf & tcpdump
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Dmitriy Zamuraev <gigabyte.tmn@gmail.com>
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Nov 2009 16:15:36 -0000

> Is there a way to have tcpdump only showing packed that have pass the 
> filtering rules, so to check that firewall rules were correctly written 
> and not letting unwanted packets in.
> 
use pflog(4) device