From owner-freebsd-net Wed May 2 17: 2: 8 2001 Delivered-To: freebsd-net@freebsd.org Received: from CPE-61-9-164-106.vic.bigpond.net.au (CPE-61-9-166-240.vic.bigpond.net.au [61.9.166.240]) by hub.freebsd.org (Postfix) with ESMTP id 9E00737B423 for ; Wed, 2 May 2001 17:02:04 -0700 (PDT) (envelope-from darrenr@reed.wattle.id.au) Received: (from root@localhost) by CPE-61-9-164-106.vic.bigpond.net.au (8.11.0/8.11.0) id f4301d324724; Thu, 3 May 2001 10:01:39 +1000 (EST) From: Darren Reed Message-Id: <200105030001.KAA24308@avalon.reed.wattle.id.au> Subject: Re: (KAME-snap 4629) Re: The future of ALTQ, IPsec & IPFILTER playing together ... In-Reply-To: <20010502162327.Z21020@dr-evil.shagadelic.org> from Jason R Thorpe at "May 2, 1 04:23:27 pm" To: thorpej@zembu.com Date: Thu, 3 May 2001 10:01:18 +1000 (EST) Cc: snap-users@kame.net, gunther@aurora.regenstrief.org, darrenr@reed.wattle.id.au, julian@elischer.org, freebsd-net@freebsd.org, ipfilter@coombs.anu.edu.au, altq@csl.sony.co.jp X-Mailer: ELM [version 2.4ME+ PL37 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org In some email I received from Jason R Thorpe, sie wrote: > On Thu, May 03, 2001 at 08:30:55AM +1000, Darren Reed wrote: > > > IPFilter 4.0 will, as part of its general increase in kernel bloat, > > let you use BPF expressions for matching. There are other things > > You mean "pcap/tcpdump expressions"? They are included. > BPF "expressions" are literally BPF bytecodes. Well, one of the goals of IPFilter is it can parse (as rules) a textual representation of what's currently loaded into the kernel. At the moment that means collecting hex output, as the bytecode instructions are less suited to being displayed all on the one line. i.e. this command line should always work : ipfstat -io | ipf -rf - Well, there different rules for "compiling in" rules and making that happen, but in general, the aim is for any rule loaded using "ipf" to work as above. Darren To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message