From owner-freebsd-hackers@FreeBSD.ORG  Tue Sep 23 09:28:31 2003
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id EDC7C16A4B3
	for <freebsd-hackers@freebsd.org>;
	Tue, 23 Sep 2003 09:28:31 -0700 (PDT)
Received: from mail.secureworks.net (mail.secureworks.net [209.101.212.155])
	by mx1.FreeBSD.org (Postfix) with SMTP id BF0D043FEA
	for <freebsd-hackers@freebsd.org>;
	Tue, 23 Sep 2003 09:28:29 -0700 (PDT)
	(envelope-from mdg@secureworks.net)
Received: (qmail 38081 invoked from network); 23 Sep 2003 16:25:58 -0000
Received: from unknown (HELO HOST-192-168-17-31.internal.secureworks.net)
	(63.239.86.253)
	by mail.secureworks.net with SMTP; 23 Sep 2003 16:25:58 -0000
Date: Tue, 23 Sep 2003 12:28:07 -0400 (EDT)
From: Matthew George <mdg@secureworks.net>
X-X-Sender: mdg@localhost
To: Luigi Rizzo <rizzo@icir.org>
In-Reply-To: <20030922134531.A44366@xorpc.icir.org>
Message-ID: <20030923122509.S87821@localhost>
References: <LIEAKECJDNPINKLJPFODIEPGDHAA.u.klann@t-online.de>
 <20030922134531.A44366@xorpc.icir.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
cc: freebsd-hackers@freebsd.org
cc: Uwe Klann <u.klann@t-online.de>
Subject: Re: IPFW2
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 23 Sep 2003 16:28:32 -0000

On Mon, 22 Sep 2003, Luigi Rizzo wrote:

> On Mon, Sep 22, 2003 at 08:07:13PM +0200, Uwe Klann wrote:
> > Hi All,
> >
> > >From the Log file IPFW:-
> > "Sep 22 00:24:13 muc /kernel: ipfw: 3300 Accept TCP 217.10.213.30:4418
> > 217.9.121.209:21 in via fxp0"
> >
> > How can I extend on FreeBSD 4.8 (ipfw2) the log contens to see the tranfered
> > data File and the amount of bytes went out? Thank you in advance for your
>
> you can count the traffic with dynamic rules (but this does not go
> to the logfile), not sure what you mean by 'see the transfered data file'

from ipf(5):

LOGGING
       When a packet is logged, with either the  log  action  or  option, the
       headers  of  the  packet  are written to the ipl packet logging psuedo-
       device. Immediately following the log keyword, the following qualifiers
       may be used (in order):

       body   indicates  that  the first 128 bytes of the packet contents will
              be logged after the headers.

I don't believe there is a comparable ipfw option ...

>
> 	luigi
>
>
> >
> > Uwe
> >
> > Uwe Klann
> > Isensteinstr. 3
> > 80634 Munich
> > Germany
> > Mail: u.klann@t-online.de
> >
> >
> >
> > _______________________________________________
> > freebsd-hackers@freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> > To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"
> _______________________________________________
> freebsd-hackers@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"
>

-- 
Matthew George
SecureWorks Technical Operations