Date: Thu, 13 Jun 2013 10:55:13 +0930 From: "Daniel O'Connor" <doconnor@gsoft.com.au> To: =?iso-8859-1?Q?Ermal_Lu=E7i?= <eri@freebsd.org> Cc: freebsd-stable@freebsd.org Subject: Re: Flow monitoring with PF Message-ID: <65D8AD99-A3F6-43EA-94AF-EFFE81583AEB@gsoft.com.au> In-Reply-To: <CAPBZQG1RqjP3kv4BjnQZr-khVXq1E-6cqdDOnqFsn4bBp_2OCw@mail.gmail.com> References: <CAPBZQG1RqjP3kv4BjnQZr-khVXq1E-6cqdDOnqFsn4bBp_2OCw@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 13/06/2013, at 3:06, Ermal Lu=E7i <eri@freebsd.org> wrote: >> I was looking at trying out flow monitoring and I found pfflowd, but = unfortunately it does not work with FreeBSD >9.0. I thought about = ng_netflow but that doesn't see my tun interface which may be related = to.. >> WARNING: attempt to domain_add(netgraph) after domainfinalize() >>=20 >> since tun0 appears after the kernel is all done. >>=20 >> Does anyone have any recommendations for generating flow information = from PF? >>=20 > Here = https://github.com/pfsense/pfsense-tools/tree/master/pfPorts/pfflowd-0.8 > is a port that should work ok with pf(4) in FreeBSD 9.0++ Ahh very nice, thanks! -- Daniel O'Connor software and network engineer for Genesis Software - http://www.gsoft.com.au "The nice thing about standards is that there are so many of them to choose from." -- Andrew Tanenbaum GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?65D8AD99-A3F6-43EA-94AF-EFFE81583AEB>