From owner-freebsd-current@FreeBSD.ORG  Sat Aug 28 22:37:38 2004
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id C6FD516A4CE
	for <freebsd-current@freebsd.org>;
	Sat, 28 Aug 2004 22:37:38 +0000 (GMT)
Received: from smtp2.dnainternet.net (smtp2.dnainternet.net [62.240.72.111])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 8D5B443D48
	for <freebsd-current@freebsd.org>;
	Sat, 28 Aug 2004 22:37:38 +0000 (GMT)
	(envelope-from erik.u@dnainternet.net)
Received: from b-192-137.cable.kpy.customers.dnainternet.fi
	([212.149.192.137]:63155smtp2.dnainternet.net
	with ESMTP id S1229129AbUH1Wh1 (ORCPT
	<rfc822;freebsd-current@freebsd.org>);
	Sun, 29 Aug 2004 01:37:27 +0300
Message-ID: <4131093D.9040601@dnainternet.net>
Date: Sun, 29 Aug 2004 01:37:49 +0300
From: "Erik U." <erik.u@dnainternet.net>
User-Agent: Mozilla Thunderbird 0.7.3 (X11/20040808)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: freebsd-current@freebsd.org
References: <413102D4.60804@dnainternet.net>
In-Reply-To: <413102D4.60804@dnainternet.net>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: Trying to see pf's logs using tcpdump
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: erik.u@dnainternet.net
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 28 Aug 2004 22:37:38 -0000

Erik U. wrote:
> On FreeBSD 5.2.1.
> 
> I installed pf from the ports, configured and ran it.
> I just get this error when trying to watch pf's logs:
> 
> [root@nat] ~ $ tcpdump -n -e -ttt -r /var/log/pflog
> tcpdump: unknown data link type 117
> 
> Why can't they just put the logs in text not in some damn binary..

Doh.. seems like i already found the answer: pftcpdump.
Well at least someone else having the same problem will
find this using google...