Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 21 Aug 2010 15:39:02 +0300
From:      "N. Ersen SISECI" <siseci@gmail.com>
To:        Free BSD <freebsd@vfemail.net>
Cc:        freebsd-pf@freebsd.org
Subject:   Re: how to use pflog with lagg device
Message-ID:  <AANLkTi==P2ODTR7RRtRuO1Gm8kmYFox4N3491NsLrjG9@mail.gmail.com>
In-Reply-To: <4C6EF6A3.1060204@vfemail.net>
References:  <4C6EF6A3.1060204@vfemail.net>

next in thread | previous in thread | raw e-mail | index | archive | help

Hi,

There is a missing minus before ttt.

tcpdump -n -e -ttt -i pflog0

Necati.

2010/8/21 Free BSD <freebsd@vfemail.net>

> Dear List members
>
> I have a server using two different NICs as a LACP lagg device. as per the
> /etc/rc.conf file, the configuration is
>
> ifconfig_em0="up"
> ifconfig_re0="up"
> cloned_interfaces="lagg0"
> ifconfig_lagg0="laggproto lacp laggport em0 laggport re0"
> ipv4_addrs_lagg0="192.168.1.3/22"
>
> pflog_enable="YES"
> pflog_logfile="/var/log/pflog"
> pflog_program="/sbin/pflogd"
> pflog_flags=""
>
>
> and the ifconfig says
>
> em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
>
>  options=219b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4,WOL_MAGIC>
>        ether 00:22:19:1d:7b:a8
>        media: Ethernet autoselect (1000baseT <full-duplex>)
>        status: active
> re0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
>
>  options=389b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_UCAST,WOL_MCAST,WOL_MAGIC>
>        ether 00:22:19:1d:7b:a8
>        media: Ethernet autoselect (1000baseT <full-duplex>)
>        status: active
> plip0: flags=8810<POINTOPOINT,SIMPLEX,MULTICAST> metric 0 mtu 1500
> pflog0: flags=141<UP,RUNNING,PROMISC> metric 0 mtu 33200
> lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
>        options=3<RXCSUM,TXCSUM>
>        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5
>        inet6 ::1 prefixlen 128
>        inet 127.0.0.1 netmask 0xff000000
>        nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
> pfsync0: flags=0<> metric 0 mtu 1460
>        syncpeer: 224.0.0.240 maxupd: 128
> enc0: flags=0<> metric 0 mtu 1536
> vboxnet0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> metric 0 mtu 1500
>        ether 0a:00:27:00:00:00
> lagg0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
>
>  options=209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC>
>        ether 00:22:19:1d:7b:a8
>        inet 192.168.1.3 netmask 0xfffffc00 broadcast 192.168.3.255
>        media: Ethernet autoselect
>        status: active
>        laggproto lacp
>        laggport: re0 flags=1c<ACTIVE,COLLECTING,DISTRIBUTING>
>        laggport: em0 flags=1c<ACTIVE,COLLECTING,DISTRIBUTING>
>
>
> However, if I try to view the log, it says
>
> tcpdump -n -e ttt -i pflog0
> tcpdump: WARNING: em0: no IPv4 address assigned
> tcpdump: syntax error
>
> I have also tried with -i lagg0, and the same error was generated. I'm not
> sure if I'm doing something wrong. I went through the FB handbook as much as
> I could, also googled around -- no luck.
>
> Any pointer / suggestion is welcom.
>
> Thanks.
>
>
>
>
> -------------------------------------------------
> This message sent via VFEmail.net
> http://www.vfemail.net
> $14.95 Lifetime accounts - 1GB disk, No bandwidth quotas!
>
> _______________________________________________
> freebsd-pf@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org"
>



-- 
N. Ersen SISECI
http://www.enderunix.org



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AANLkTi==P2ODTR7RRtRuO1Gm8kmYFox4N3491NsLrjG9>