From owner-freebsd-hackers@FreeBSD.ORG Thu Dec 29 13:19:17 2005 Return-Path: X-Original-To: freebsd-hackers@freebsd.org Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3349016A41F for ; Thu, 29 Dec 2005 13:19:17 +0000 (GMT) (envelope-from roma.a.g@gmail.com) Received: from zproxy.gmail.com (zproxy.gmail.com [64.233.162.205]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5F0FB43D55 for ; Thu, 29 Dec 2005 13:19:16 +0000 (GMT) (envelope-from roma.a.g@gmail.com) Received: by zproxy.gmail.com with SMTP id 8so1757361nzo for ; Thu, 29 Dec 2005 05:19:15 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:date:from:x-mailer:reply-to:organization:x-priority:message-id:to:subject:mime-version:content-type:content-transfer-encoding; b=uUJ4m5TfIRpJf3MCINNHO3Bsva6XoMwMRDEXDaOPpeOkUG5wyfZgYMyGgYbsG7wtIkRlWqRAYl19mseQBtsxrbNtX89FXrBiP0lUOcShK9g51fuZvp1ytQoq8jb0P2haR94UBatFmRFt1cBEvc+VxALVO/KmBt+PowuPzd1Q718= Received: by 10.65.83.3 with SMTP id k3mr2765703qbl; Thu, 29 Dec 2005 05:19:15 -0800 (PST) Received: from pridep3.ad.office.acropolis.ru ( [81.211.90.3]) by mx.gmail.com with ESMTP id f16sm2569672qba.2005.12.29.05.19.13; Thu, 29 Dec 2005 05:19:14 -0800 (PST) Date: Thu, 29 Dec 2005 16:20:15 +0300 From: "Roman Gorohov. " X-Mailer: The Bat! (v3.62.14) Professional Organization: Acropolis X-Priority: 3 (Normal) Message-ID: <519860652.20051229162015@gmail.com> To: freebsd-hackers@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Subject: how to alter firewall stats output? X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: "roma.a.g" List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Dec 2005 13:19:17 -0000 Hello, freebsd-hackers. Is there any app that allow standart freebsd firewall(ipfw,ipf,pf, last preferable) generate reports looks like 'srcip dstip:port bytes' for rule (for example pf)"pass in log-all quick on $ext_if proto tcp from any to $me port 80"? I know pf may report bytes per rule, but it doesn't include srcip in report. -- Roman Gorohov. mailto:roma.a.g@gmail.com