![]() |
|
|
|
|||
|
Hi
I have an OpenBSD 5.1 running as firewall, bgp and traffic shaper. I am using priq and hfsc for shaping the traffic I would like to know if there is any way to debug my configuration in real time and see which packets are passing from each queue. More specifically I would like to see all packet going through the default queue in order to identify them and put them on the write queue. Ideally I would like to see 0 traffic on the default queue. I know the log on pf rules but I am looking for a way to identify for example the packet using tcpdump. Any suggestion? |
|
|||
|
Have you tried
Code:
systat queues
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump |
|
|||
|
Yes. this just return the statistics of the queues. I want see the actual packets in tcpdump way.
|
|
||||
|
Queue names are not logged. From pflog(4):
Code:
Each packet retrieved on this interface has a header associated with it
of length PFLOG_HDRLEN. This header documents the address family,
interface name, rule number, reason, action, and direction of the packet
that was logged. This structure, defined in <net/if_pflog.h> looks like
struct pfloghdr {
u_int8_t length;
sa_family_t af;
u_int8_t action;
u_int8_t reason;
char ifname[IFNAMSIZ];
char ruleset[PF_RULESET_NAME_SIZE];
u_int32_t rulenr;
u_int32_t subrulenr;
uid_t uid;
pid_t pid;
uid_t rule_uid;
pid_t rule_pid;
u_int8_t dir;
u_int8_t pad[3];
};
__________________
OpenBSD LiveCDs/LiveDVDs |
![]() |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| PF ALTQ on 3 NIC's | magnesik | FreeBSD Security | 1 | 13th August 2011 06:18 AM |
| PF-queue | ultranothing | OpenBSD Security | 3 | 1st September 2009 05:24 PM |
| pflog not logging. | bsdnewbie999 | OpenBSD General | 9 | 13th March 2009 10:19 PM |
| Webserver email queue | Yuka | FreeBSD General | 5 | 11th November 2008 11:52 PM |
| PF w/ ALTQ - Queue errors exceeding bandwidth | plexter | OpenBSD Security | 11 | 26th October 2008 12:01 AM |