From owner-freebsd-pf@FreeBSD.ORG Tue Feb 1 08:26:26 2011 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 37DD71065673 for ; Tue, 1 Feb 2011 08:26:26 +0000 (UTC) (envelope-from peterjeremy@acm.org) Received: from fallbackmx10.syd.optusnet.com.au (fallbackmx10.syd.optusnet.com.au [211.29.132.251]) by mx1.freebsd.org (Postfix) with ESMTP id E849B8FC17 for ; Tue, 1 Feb 2011 08:26:23 +0000 (UTC) Received: from mail17.syd.optusnet.com.au (mail17.syd.optusnet.com.au [211.29.132.198]) by fallbackmx10.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP id p115wEoK032387 for ; Tue, 1 Feb 2011 16:58:14 +1100 Received: from server.vk2pj.dyndns.org (c220-239-52-50.belrs4.nsw.optusnet.com.au [220.239.52.50]) by mail17.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP id p115vulM001292 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 1 Feb 2011 16:57:58 +1100 X-Bogosity: Ham, spamicity=0.000000 Received: from server.vk2pj.dyndns.org (localhost.vk2pj.dyndns.org [127.0.0.1]) by server.vk2pj.dyndns.org (8.14.4/8.14.4) with ESMTP id p115vt6v061481; Tue, 1 Feb 2011 16:57:55 +1100 (EST) (envelope-from peter@server.vk2pj.dyndns.org) Received: (from peter@localhost) by server.vk2pj.dyndns.org (8.14.4/8.14.4/Submit) id p115vrRJ061480; Tue, 1 Feb 2011 16:57:53 +1100 (EST) (envelope-from peter) Date: Tue, 1 Feb 2011 16:57:53 +1100 From: Peter Jeremy To: Daniel Hartmeier Message-ID: <20110201055753.GA61465@server.vk2pj.dyndns.org> References: <20110131110635.GA5861@insomnia.benzedrine.cx> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="IS0zKkzwUGydFO0o" Content-Disposition: inline In-Reply-To: <20110131110635.GA5861@insomnia.benzedrine.cx> X-PGP-Key: http://members.optusnet.com.au/peterjeremy/pubkey.asc User-Agent: Mutt/1.5.20 (2009-06-14) Cc: freebsd-pf@freebsd.org Subject: Re: log NAT translations X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Feb 2011 08:26:26 -0000 --IS0zKkzwUGydFO0o Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2011-Jan-31 12:06:35 +0100, Daniel Hartmeier wrot= e: >pfsync should be the simplest source to get that information from, >the idea is that you can use tcpdump on the pfsync interface to >filter and print any state changes. > >It seems neither the stock tcpdump nor the one from ports actually >does this (yet) in FreeBSD. That's a pity, since it's sometimes >a very useful feature, not just for debugging. I submitted patches for this some time ago in PR bin/124825. --=20 Peter Jeremy --IS0zKkzwUGydFO0o Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.15 (FreeBSD) iEYEARECAAYFAk1HoOEACgkQ/opHv/APuIcyhQCfVniHvzCZ3GP6qlMVvplhOpd4 DnEAnAh9u9x3TwcaDQrdMIlKivfOZbOu =FARS -----END PGP SIGNATURE----- --IS0zKkzwUGydFO0o--