| Age | Commit message (Collapse) | Author | Files | Lines |
|---|
|
Changes in version 0.7:
This version adds state filtering, which is funded by backcountry.com,
many thanks. It is now possible to select which states are displayed
using a tcpdump(8) like filtering language. The filter can be specified
on the command line, using the '-f' switch. It is also possible to
change the filter interactively using the 'f' command key.
Some sample, not necessarily practical, filters are given below:
- Do not show pfsync or carp traffic:
not (pfsync or carp)
not pfsync and not carp
- DNS traffic not going to or coming from the DNS servers:
port 53 and not host (10.0.0.10 or 10.0.0.11)
- States with input bytes greater than 1M:
inb > 1000000
- Traffic with very small average packet size:
((inb / inp) + (outb / outp))/2 < 100
inb / inp + outb / outp < 200
Changes in version 0.6:
No functional changes. It now compiles and runs on OpenBSD 4.1-current
after pf interface changes. This version also contains separated pf
and display code. This should make adding new views easier.
Changes in version 0.5:
This version displays all active pf rules by traversing the ruleset tree.
In addition HFSC queues are now displayed correctly thanks to
Jared Spiegel. This version also incorporates other patches and comments
I have received since the previous release. Many thanks to all who have
contributed.
- New command-line switch 'S' to start the display at a given state.
- Display HFCS statistics in the queue page.
- Fixed state and rule byte and packet counters
- Fixed state sorting by packets and bytes
- Fixed some minor display problems
- The rule view now traverses all rulesets, and displays all active rules,
together with anchor (ruleset) names.
- Anchor and Label fields dynamically resize themselves
|
|
NetBSD 2 + pflkm, because the path was substituted by "__nonexistent__".
So to fix this properly, add a patch with CPP conditional which fixes
the path for __DragonFly__.
|
|
can be obtained from limits.h and RB_PROTOTYPE is needed before
RB_GENERATE.
|
|
|
|
Pftop is a small, curses-based utility for real-time display of
active states and rule statistics for PF, the packet filter from OpenBSD.
|
