Date: Fri, 20 Aug 2004 10:09:40 -0400 From: "JJB" <Barbish3@adelphia.net> To: "Sathyanarayana Setty Badrinath" <badrinath_ks@hotmail.com>, <freebsd-questions@freebsd.org> Subject: RE: Trouble with ipfstat Message-ID: <MIEPLLIBMLEEABPDBIEGGEJBGJAA.Barbish3@adelphia.net> In-Reply-To: <BAY23-F20pJk6KKATTz0000a882@hotmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
owner-freebsd-questions@freebsd.org wrote: > Hi, > I have installed freebsd 4.10 (i386) with ipfilter firewall. When > I do a cvsup, compile kernel, install and restart with new kernel, > I have trouble with "ipfstat -t" output. The source and > destination ip address are a bunch of zeroes and not the actuals. > "ipfstat -t" works well before running cvsup and kernel > compilation. I have included dump various commands down in this > mail. Advance thanks for the help ! > badri > > > Sys53# uname -a > FreeBSD Sys53.softland.co.in 4.10-STABLE FreeBSD 4.10-STABLE #1: > Wed Aug 18 16:50:36 IST 2004 > > Sys53# ipf -V > ipf: IP Filter: v3.4.31 (336) > Kernel: IP Filter: v3.4.35 > Running: yes > Log Flags: 0 = none set > Default: block all, Logging: available > Active list: 1 > Sys53#ipfstat -t > > Sys53.softland.co.in - IP Filter: v3.4.31 - state top > 12:32:04 > Src = 0.0.0.0 Dest = 0.0.0.0 Proto = any Sorted by = # bytes > Source IP Destination IP ST PR #pkts > #bytes ttl > 0.0.0.0 0.0.0.0 50/1D ip 10580 > 8836110 -20:- > 0.0.0.0 0.0.0.0 70/44 ip 20024 > 6037334 -20:- > 0.0.0.0 0.0.0.0 70/44 &nb sp; ip > 15334 4984190 -20:- > 0.0.0.0 0.0.0.0 70/44 ip 14494 > 4736824 -20:- > 0.0.0.0 0.0.0.0 70/44 ip 12714 > 4153774 -20:- > 0.0.0.0 0.0.0.0 20/19 ip 1166 > 1135134 -20:- > 0.0.0.0 0.0.0.0 &nb sp; 70/44 ip > 2284 675230 -20:- > 0.0.0.0 0.0.0.0 70/44 ip 2278 > 674894 -20:- > _________________________________________________________________ > > Block annoying pop ups! Empower your search! [1]Enrich your > internet experience! > > References > > 1. http://g.msn.com/8HMBENIN/2746??PS=47575 > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" The ipfstat -t command works fine for me. I installed 4.10 from downloaded .iso image. I do not have ipf compiled into kernel but instead use the loadable module. ipf -V command says I am using ipfilter v3.4.31 in kernel. Your ipf -V says ipfilter v3.4.35 in kernel. This may be the cause of your problem. Try recompiling your kernel without ipfilter included and the ipfilter loadable module will be automatically loaded by rc.conf ipfilter_enable="YES" statement on reboot. If this fixes your problem, them please submit bug report.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?MIEPLLIBMLEEABPDBIEGGEJBGJAA.Barbish3>