From owner-freebsd-questions@FreeBSD.ORG Mon Dec 19 03:32:56 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DFD0816A41F for ; Mon, 19 Dec 2005 03:32:56 +0000 (GMT) (envelope-from parv@pair.com) Received: from mta9.adelphia.net (mta9.adelphia.net [68.168.78.199]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6880143D4C for ; Mon, 19 Dec 2005 03:32:56 +0000 (GMT) (envelope-from parv@pair.com) Received: from default.chvlva.adelphia.net ([68.67.248.52]) by mta9.adelphia.net (InterMail vM.6.01.05.02 201-2131-123-102-20050715) with ESMTP id <20051219033255.HENR14388.mta9.adelphia.net@default.chvlva.adelphia.net> for ; Sun, 18 Dec 2005 22:32:55 -0500 Received: by default.chvlva.adelphia.net (Postfix, from userid 1000) id 1E639B5CB; Sun, 18 Dec 2005 22:33:00 -0500 (EST) Date: Sun, 18 Dec 2005 22:33:00 -0500 From: Parv To: freebsd-questions@freebsd.org Message-ID: <20051219033259.GA1159@holestein.holy.cow> Mail-Followup-To: freebsd-questions@freebsd.org References: <20051218213501.GA72282@holestein.holy.cow> <20051218214608.GA92198@scott.blazing.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20051218214608.GA92198@scott.blazing.de> Subject: Re: Compacting the "pf -v -s rules" output similar to "ipfstat -ionh" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Dec 2005 03:32:57 -0000 in message <20051218214608.GA92198@scott.blazing.de>, wrote Frank Steinborn thusly... > > Parv wrote: > > > > Before i write it myself, has anybody got a already prepared way to > > compact the "pfctl -v -s rules" output ... > > > > pass in on lo0 all > > [ Evaluations: 22188 Packets: 10925 Bytes: 8392463 States: 0 ] > > pass out on lo0 all > > [ Evaluations: 19 Packets: 0 Bytes: 0 States: 0 ] ... > > ... to something like ... > > > > 22188 pass in on lo0 all > > 21850 pass out on lo0 all ... > Don't use -v, just pfctl -s rules. That, however, won't give you a > number of packets/bytes passed to the rules. Yes i am aware of that. Without '-v' all i get only the parsed/loaded rules which is not very useful to me. - Parv --