Date: Tue, 23 Sep 2003 12:28:07 -0400 (EDT) From: Matthew George <mdg@secureworks.net> To: Luigi Rizzo <rizzo@icir.org> Cc: Uwe Klann <u.klann@t-online.de> Subject: Re: IPFW2 Message-ID: <20030923122509.S87821@localhost> In-Reply-To: <20030922134531.A44366@xorpc.icir.org> References: <LIEAKECJDNPINKLJPFODIEPGDHAA.u.klann@t-online.de> <20030922134531.A44366@xorpc.icir.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 22 Sep 2003, Luigi Rizzo wrote:
> On Mon, Sep 22, 2003 at 08:07:13PM +0200, Uwe Klann wrote:
> > Hi All,
> >
> > >From the Log file IPFW:-
> > "Sep 22 00:24:13 muc /kernel: ipfw: 3300 Accept TCP 217.10.213.30:4418
> > 217.9.121.209:21 in via fxp0"
> >
> > How can I extend on FreeBSD 4.8 (ipfw2) the log contens to see the tranfered
> > data File and the amount of bytes went out? Thank you in advance for your
>
> you can count the traffic with dynamic rules (but this does not go
> to the logfile), not sure what you mean by 'see the transfered data file'
from ipf(5):
LOGGING
When a packet is logged, with either the log action or option, the
headers of the packet are written to the ipl packet logging psuedo-
device. Immediately following the log keyword, the following qualifiers
may be used (in order):
body indicates that the first 128 bytes of the packet contents will
be logged after the headers.
I don't believe there is a comparable ipfw option ...
>
> luigi
>
>
> >
> > Uwe
> >
> > Uwe Klann
> > Isensteinstr. 3
> > 80634 Munich
> > Germany
> > Mail: u.klann@t-online.de
> >
> >
> >
> > _______________________________________________
> > freebsd-hackers@freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> > To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"
> _______________________________________________
> freebsd-hackers@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"
>
--
Matthew George
SecureWorks Technical Operations
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030923122509.S87821>