From owner-freebsd-pf@FreeBSD.ORG  Sun Jul 11 05:51:46 2010
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 80FFD106564A
	for <freebsd-pf@freebsd.org>; Sun, 11 Jul 2010 05:51:46 +0000 (UTC)
	(envelope-from bc979@lafn.org)
Received: from zoom.lafn.org (zoom.lafn.ORG [206.117.18.8])
	by mx1.freebsd.org (Postfix) with ESMTP id 4E26A8FC16
	for <freebsd-pf@freebsd.org>; Sun, 11 Jul 2010 05:51:46 +0000 (UTC)
Received: from [10.0.1.4] (pool-71-109-144-133.lsanca.dsl-w.verizon.net
	[71.109.144.133]) (authenticated bits=0)
	by zoom.lafn.org (8.14.3/8.14.2) with ESMTP id o6B5YGnO022454
	(version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO)
	for <freebsd-pf@freebsd.org>; Sat, 10 Jul 2010 22:34:17 -0700 (PDT)
	(envelope-from bc979@lafn.org)
From: Doug Hardie <bc979@lafn.org>
Content-Type: text/plain; charset=us-ascii
Message-Id: <71E83E87-9849-4963-8260-4473DC931CA2@lafn.org>
Date: Sat, 10 Jul 2010 22:34:16 -0700
To: freebsd-pf@freebsd.org
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Apple Message framework v1081)
X-Mailer: Apple Mail (2.1081)
X-Virus-Scanned: clamav-milter 0.95.3 at zoom.lafn.org
X-Virus-Status: Clean
Subject: Interpreting Logs
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 11 Jul 2010 05:51:46 -0000

I have not been able to find any real information on the contents of the =
logs.  My logs show a number of interesting entries that I just can't =
find any information to explain.  For example:

loose state match

BAD ICMP 11:0

state reuse

State failure on:   2 3   |   6

State failure on: 1       | 5 =20

BAD state

How do you interpret these?  Is there anything written on the log =
contents?=