Date: Wed, 26 Oct 2005 12:08:52 +0400 From: Anton Nikiforov <anton@nikiforov.ru> To: dawnshade <dawnshade@mail.ru> Cc: stable@freebsd.org, freebsd-stable@freebsd.org Subject: Re: pf and short packets Message-ID: <435F3994.9020801@nikiforov.ru> In-Reply-To: <200510261053.27853.dawnshade@mail.ru> References: <435E85AB.3070701@nikiforov.ru> <200510261053.27853.dawnshade@mail.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] dawnshade wrote: > On Tuesday 25 October 2005 23:21, Anton Nikiforov wrote: > >> tcpdump -n -e -ttt -x -i pflog0 host 127.0.0.1 >>000034 rule 0/3(short): pass out on lo0: IP 127.0.0.1.514 > >>127.0.0.1.643: . ack 30 win 65535 >> 0x0000: 4600 002c 6605 4000 0306 11c5 7f00 0001 F..,f.@......... >> 0x0010: 7f00 0001 0100 0000 0202 0283 8129 5dab .............)]. >> 0x0020: 5db7 f2f2 5010 ffff 7dce 0000 ]...P...}... >>000034 rule 0/3(short): pass out on lo0: IP 127.0.0.1.514 > >>127.0.0.1.643: . ack 30 win 65535 >> 0x0000: 4600 002c d21d 4000 0306 a5ac 7f00 0001 F..,..@......... >> 0x0010: 7f00 0001 0100 0000 0202 0283 8129 5dab .............)]. >> 0x0020: 5db7 f2f2 5010 ffff 7dce 0000 ]...P...}... >> >>The rule for this packet is not a "log" one, but the sign (short) is >>what i cannot understand. > > > Read 'man 1 tcpdump' about key "-s". > You command must be like "tcpdump -s 1000 -n -e -ttt -x -i pflog0 host > 127.0.0.1" > > Change value 1000 to appropriate. Hi, and thanks for the replay, but my question is not about how to use tcpdump (i know -s key), but what to do with pf to make this packets pass through. When my pf is up i cannot rsh to ipcad, but when it is down - everything is working just fine. I need this rsh to get my ip statistics. Best regards, Anton > > _______________________________________________ > freebsd-stable@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-stable > To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org" > [-- Attachment #2 --] 0 *H 01 0 + 0 *H (00Jc0 *H 0b1 0 UZA1%0#U Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA0 050416110311Z 060416110311Z0D1 0 UThawte Freemail Member1!0 *H anton@nikiforov.ru0"0 *H 0 A\l2[t P[ *_|.!bcTCGSk5bCqJ< ڵK2Eoծ6 VㅂÅ9knpnj" LE3!^_3̂U\Y[f ظtRW,u.둣P:6J>Q ,L s5-浪'Ŗdzr8^sj,&^? ?0=0U 0 U 0anton@nikiforov.ru0 U 0 0 *H M"-;rE z[/d/_*d#\k krt}:c iKN?ʉf9+%R2 Yqص[K:\4<'`KVޗ |"Hb0?0 0 *H 01 0 UZA10U Western Cape10U Cape Town10U Thawte Consulting1(0&U Certification Services Division1$0"UThawte Personal Freemail CA1+0) *H personal-freemail@thawte.com0 030717000000Z 130716235959Z0b1 0 UZA1%0#U Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA00 *H 0 Ħ<UsUNʙZ hup [v :aQP 0cZ,p+Z?qV˯< 6$*+w=+>@dקe*TH<a@ dr` 00U 0 0CU <0:08642http://crl.thawte.com/ThawtePersonalFreemailCA.crl0 U 0)U "0 0 10UPrivateLabel2-1380 *H HP . fgCL!6 -6/ P p<ab:~ t%Pb'qW%ݩ9 Oe_N4[5MwV!x!5$ F]_eO1D0@0i0b1 0 UZA1%0#U Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CAc0 + 0 *H 1 *H 0 *H 1 051026080852Z0# *H 1ɨd~(% ߁0R *H 1E0C0 *H 0*H 0 *H @0+0 *H (0 *H DF(ݸ.T s QY00OH#T4 ZNοo=Iw$Y$f lc/ f XZ=ږfτg6I8n_`j%_\]z"=`3+Clݿxq ]C~˦ TB_x#ǡ</r?= зC@M2`(dԷ;ьd|p<{l2Us5
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?435F3994.9020801>