From owner-freebsd-questions@FreeBSD.ORG Mon Jun 27 18:15:30 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 93F5316A41C for ; Mon, 27 Jun 2005 18:15:30 +0000 (GMT) (envelope-from parv@pair.com) Received: from mta11.adelphia.net (mta11.adelphia.net [68.168.78.205]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4DF5843D49 for ; Mon, 27 Jun 2005 18:15:30 +0000 (GMT) (envelope-from parv@pair.com) Received: from default.chvlva.adelphia.net ([69.160.65.223]) by mta11.adelphia.net (InterMail vM.6.01.04.01 201-2131-118-101-20041129) with ESMTP id <20050627181529.WIJP24042.mta11.adelphia.net@default.chvlva.adelphia.net>; Mon, 27 Jun 2005 14:15:29 -0400 Received: by default.chvlva.adelphia.net (Postfix, from userid 1000) id A17B1B4FC; Mon, 27 Jun 2005 14:15:51 -0400 (EDT) Date: Mon, 27 Jun 2005 14:15:51 -0400 From: Parv To: Stephan Weaver Message-ID: <20050627181551.GA48856@holestein.holy.cow> Mail-Followup-To: Stephan Weaver , freebsd-questions@freebsd.org References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Cc: freebsd-questions@freebsd.org Subject: Re: IPF Logging packets Every 2-10 Seconds. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: f-q List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jun 2005 18:15:30 -0000 in message , wrote Stephan Weaver thusly... > > firewall# tail -f /var/log/ipfilter.log > 27/06/2005 11:13:48.699874 vr0 @0:27 b 138.217.177.128,2840 -> > 192.168.1.1,16478 PR tcp len 20 48 -S IN > 27/06/2005 11:13:54.736606 vr0 @0:27 b 138.217.177.128,2840 -> > 192.168.1.1,16478 PR tcp len 20 48 -S IN I was going to parse the logs, but the forced line breaks prevent me. When you (in general) are posting system messages, errors & such, please keep the line breaks/tabs as they appear in the original message. - Parv --