Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 29 Nov 2005 10:07:30 +0100
From:      Daniel Hartmeier <daniel@benzedrine.cx>
To:        Forrest Aldrich <forrie@forrie.com>
Cc:        freebsd-pf@freebsd.org
Subject:   Re: Statistics on individual table entries...
Message-ID:  <20051129090730.GC23781@insomnia.benzedrine.cx>
In-Reply-To: <438C17C2.8040709@forrie.com>
References:  <438C17C2.8040709@forrie.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Nov 29, 2005 at 03:56:34AM -0500, Forrest Aldrich wrote:

> In PF, I am trying to determine how to accomplish similiarly.  The command:
> 
>    pf -vvs Tables
> 
> Provides summaries only.  I don't see a way to accomplish the above.

Additional per-table counters can be printed with

  pfctl -t foo -vvTs

There's no 'last-matched timestamp', however.

Depending on what you need it for (like, purge entries that haven't been
used for a period of time), you could work around that by clearing the
packet/byte counters (representing the packets that were matched by
rules using the tables) and regularly remove those that show zero values
(unused since last invokation of that clearing script).

Daniel



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20051129090730.GC23781>