From owner-freebsd-questions@freebsd.org  Fri Jan 27 19:32:37 2017
Return-Path: <owner-freebsd-questions@freebsd.org>
Delivered-To: freebsd-questions@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9183DCC42A9
 for <freebsd-questions@mailman.ysv.freebsd.org>;
 Fri, 27 Jan 2017 19:32:37 +0000 (UTC)
 (envelope-from starikarp@yandex.com)
Received: from forward2h.cmail.yandex.net (forward2h.cmail.yandex.net
 [IPv6:2a02:6b8:0:f35::12])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "forwards.mail.yandex.net", Issuer "Yandex CA" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 4C3BE91F
 for <freebsd-questions@freebsd.org>; Fri, 27 Jan 2017 19:32:36 +0000 (UTC)
 (envelope-from starikarp@yandex.com)
Received: from smtp2h.mail.yandex.net (smtp2h.mail.yandex.net [84.201.187.145])
 by forward2h.cmail.yandex.net (Yandex) with ESMTP id 4B3ED20C7B;
 Fri, 27 Jan 2017 22:32:33 +0300 (MSK)
Received: from smtp2h.mail.yandex.net (localhost.localdomain [127.0.0.1])
 by smtp2h.mail.yandex.net (Yandex) with ESMTP id 7D6F97806BF;
 Fri, 27 Jan 2017 22:32:32 +0300 (MSK)
Received: by smtp2h.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id
 7eWWgqQgfs-WU0S9N8o; Fri, 27 Jan 2017 22:32:31 +0300
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client certificate not present)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.com; s=mail;
 t=1485545551; bh=uZ7l16AnxhrHQpBHoXpTFLV9L6J8B2RvaaxCKaszuUE=;
 h=Message-ID:Subject:From:To:Date:In-Reply-To:References;
 b=BI1w0+FYMTMyY5OUOrpRXxZeQRyRtYwT7eDDIvrgzw5Cb1mToiPMBpyulxMVf506F
 5QZdlBC4RGIdrGfhor+Qloidq35D6QW7Cr57xYcvaiFcZMb8s5GmLDMExMF867CFmw
 wdpFkEyL7niMRW94gbyR/VM5VqvuiSimZz52f6nQ=
Authentication-Results: smtp2h.mail.yandex.net; dkim=pass header.i=@yandex.com
X-Yandex-Suid-Status: 1 0,1 0
Message-ID: <1485545547.5165.1.camel@yandex.com>
Subject: Re: pf log
From: Stari Karp <starikarp@yandex.com>
To: Noel <noeldude@gmail.com>, freebsd-questions@freebsd.org
Date: Fri, 27 Jan 2017 14:32:27 -0500
In-Reply-To: <a0d0904b-20c1-f4d7-4497-f96934b1cf7f@gmail.com>
References: <1485539914.4837.6.camel@yandex.com>
 <a0d0904b-20c1-f4d7-4497-f96934b1cf7f@gmail.com>
Content-Type: text/plain; charset="UTF-8"
X-Mailer: Evolution 3.18.5.1 FreeBSD GNOME Team Port 
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jan 2017 19:32:37 -0000

On Fri, 2017-01-27 at 12:35 -0600, Noel wrote:
> On 1/27/2017 11:58 AM, Stari Karp wrote:
> > 
> > Hi!
> > 
> > I am using pf firewall on FreeBSD 11.0-RELEASE (amd64). In
> > /etc/rc.conf
> > I have:
> > 
> > pf_enable="YES"
> > pflog_enable="YES"
> > 
> > I made a new pf.conf on January 8th and in/var/log I have pflog and
> > after that nothing more. The file has just
> > "Ôò¡............t...u..."
> > 
> > Is it normal or is something wrong, please?
> > 
> 
> That's normal.  The pflog is a binary log (not human readable) you
> can read with tcpdump.  See the handbook for details.
> 
> 
> 
tcpdump -v -r /var/log/pflog
reading from file /var/log/pflog, link-type PFLOG (OpenBSD pflog file).

I have nothing in log as I update 10.3 release to FreeBSD-11.0-RELEASE

I forgot to say that I use FreeBSD as a desktop.