From owner-freebsd-questions@FreeBSD.ORG Tue Mar 2 12:25:43 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0F16A16A4CE for ; Tue, 2 Mar 2004 12:25:43 -0800 (PST) Received: from mail.6s-gaming.com (unknown [83.98.136.62]) by mx1.FreeBSD.org (Postfix) with ESMTP id 991C743D2D for ; Tue, 2 Mar 2004 12:25:42 -0800 (PST) (envelope-from admin@6s-gaming.com) Received: from mail.6s-gaming.com (vorlon [83.98.136.62]) by mail.6s-gaming.com (Postfix) with SMTP id C09042FCE35 for ; Tue, 2 Mar 2004 20:26:06 +0100 (CET) Received: from 212.113.164.104 (proxying for 81.84.5.19) (SquirrelMail authenticated user admin) by mail.6s-gaming.com with HTTP; Tue, 2 Mar 2004 20:26:06 +0100 (CET) Message-ID: <58071.212.113.164.104.1078255566.squirrel@mail.6s-gaming.com> Date: Tue, 2 Mar 2004 20:26:06 +0100 (CET) From: "Hugo (6s-gaming.com)" To: freebsd-questions@FreeBSD.org User-Agent: SquirrelMail/1.4.2 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 Importance: Normal Subject: extended IPFW funcionality.. possible? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Mar 2004 20:25:43 -0000 Hi, Come to think about it, it would be REALLY useful if one could see the uid of the user initializing an outbound connection that got blocked, and the size of the packet that was just blocked. I remembered this as I am trying to figure out who is using excess bandwidth from a server with 102 users, if ipfw would log uid of the user trying to connect outside it would be so useful. I remembered the packetsize thing mainly because attempted ICMP floods. No one ever thought on this ? Or does this exist, but these options must be turned on somewhere? -- http://www.6s-gaming.com - your online store!