From owner-freebsd-net@FreeBSD.ORG  Wed Dec 31 14:58:36 2014
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 722F6443
 for <net@freebsd.org>; Wed, 31 Dec 2014 14:58:36 +0000 (UTC)
Received: from mail.madpilot.net (grunt.madpilot.net [78.47.145.38])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 304CE27C9
 for <net@freebsd.org>; Wed, 31 Dec 2014 14:58:35 +0000 (UTC)
Received: from mail (mail [192.168.254.3])
 by mail.madpilot.net (Postfix) with ESMTP id 3kCFxB3rddzZs1;
 Wed, 31 Dec 2014 15:58:22 +0100 (CET)
Received: from mail.madpilot.net ([192.168.254.3])
 by mail (mail.madpilot.net [192.168.254.3]) (amavisd-new, port 10024)
 with ESMTP id FSC6T-avrZHO; Wed, 31 Dec 2014 15:58:20 +0100 (CET)
Received: from tommy.madpilot.net
 (host3-108-dynamic.50-79-r.retail.telecomitalia.it [79.50.108.3])
 by mail.madpilot.net (Postfix) with ESMTPSA;
 Wed, 31 Dec 2014 15:58:20 +0100 (CET)
Message-ID: <54A40F09.5040909@madpilot.net>
Date: Wed, 31 Dec 2014 15:58:17 +0100
From: Guido Falsi <mad@madpilot.net>
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64;
 rv:31.0) Gecko/20100101 Thunderbird/31.3.0
MIME-Version: 1.0
To: Andrea Venturoli <ml@netfence.it>, net@freebsd.org
Subject: Re: Dynamic ipfw rules' top
References: <54A40BAD.2000605@netfence.it>
In-Reply-To: <54A40BAD.2000605@netfence.it>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net/>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 31 Dec 2014 14:58:36 -0000

On 12/31/14 15:43, Andrea Venturoli wrote:
> Hello.
> 
> This might be a strange idea, but does such a thing exist?
> 
> I mean: is there any tool that can show in real-time which dynamic rules
> are active, their timers, etc... like top does for processes?
> 

I'm using the port sysutils/cmdwatch with ipfw, like this:

cmdwatch "ipfw -d show | sed -n -e '/## Dynamic rules/,\$p'"

It's a little crude but works quite fine.

Needs to run as root, obviously.

-- 
Guido Falsi <mad@madpilot.net>