From owner-freebsd-pf@FreeBSD.ORG  Sat Dec  2 22:03:37 2006
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
X-Original-To: freebsd-pf@freebsd.org
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 34BB616A407
	for <freebsd-pf@freebsd.org>; Sat,  2 Dec 2006 22:03:37 +0000 (UTC)
	(envelope-from agaletski@ukr.net)
Received: from storage.ukr.net (storage.ukr.net [212.42.65.69])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 03EE743C9D
	for <freebsd-pf@freebsd.org>; Sat,  2 Dec 2006 22:03:13 +0000 (GMT)
	(envelope-from agaletski@ukr.net)
Received: from mail by storage.ukr.net with local ID 1GqcxL-000Fdo-0o
	for freebsd-pf@freebsd.org; Sun, 03 Dec 2006 00:03:35 +0200
Received: from [193.232.65.168] by e.ukr.net with HTTP;
	Sat, 02 Dec 2006 22:03:35 +0000 (GMT)
From: "Andriy Galetski" <agaletski@ukr.net>
To: freebsd-pf@freebsd.org
Mime-Version: 1.0
X-Mailer: mPOP Web-Mail 2.19 advanced
X-Originating-IP: [193.232.65.168]
Content-Type: text/plain; charset=windows-1251
Content-Transfer-Encoding: 8bit
Message-Id: <E1GqcxL-000Fdo-0o@storage.ukr.net>
Date: Sun, 03 Dec 2006 00:03:35 +0200
Subject: Use pfflowd to flow tracking on FreeBSD6.1
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Andriy Galetski <agaletski@ukr.net>
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 02 Dec 2006 22:03:37 -0000

Hi.
I have build FreeBSD6.1 kernel with options:

device pf
device pflog
device pfsync

PF filter work ok.
I can monitor data passing through packetfilter using
tcpdump -i pflog0
But I can`t use pfflowd with pfsync to pass stat to netflow collector.

tcpdump -i pfsync0
tcpdump: WARNING: pfsync0: no IPv4 address assigned
tcpdump: unsupported data link type 121

I spend 2 days with reading man and experimens
unfortunately without success.
Runing pfflowd -n host:port -D 
don`t  show me any activity or debugging output. It`s look like
pfflowd don`t get data from pfsync.

In my opinion pfsync kernel part or pfflowd did`t work well
on FreeBSD.
I saw it on OpenBSD it`s work fine.

Do someone successfully run 
pfflowd on FreeBSD6.1-6.2 ?