freebsd-nq/sys/netinet/ipfw
Luigi Rizzo 1328a38b96 Add some experimental code to log traffic with tcpdump,
similar to pflog(4).
To use the feature, just put the 'log' options on rules
you are interested in, e.g.

	ipfw add 5000 count log ....

and run
	tcpdump -ni ipfw0 ...

net.inet.ip.fw.verbose=0 enables logging to ipfw0,
net.inet.ip.fw.verbose=1 sends logging to syslog as before.

More features can be added, similar to pflog(), to store in
the MAC header metadata such as rule numbers and actions.
Manpage to come once features are settled.
2009-12-17 23:11:16 +00:00
..
ip_dummynet.c Various cosmetic cleanup of the files: 2009-12-16 10:48:40 +00:00
ip_fw2.c Add some experimental code to log traffic with tcpdump, 2009-12-17 23:11:16 +00:00
ip_fw_dynamic.c bring back a couple of #include that are supplied by nesting, 2009-12-16 13:00:37 +00:00
ip_fw_log.c Add some experimental code to log traffic with tcpdump, 2009-12-17 23:11:16 +00:00
ip_fw_nat.c Various cosmetic cleanup of the files: 2009-12-16 10:48:40 +00:00
ip_fw_pfil.c Various cosmetic cleanup of the files: 2009-12-16 10:48:40 +00:00
ip_fw_private.h Add some experimental code to log traffic with tcpdump, 2009-12-17 23:11:16 +00:00
ip_fw_sockopt.c remove a duplicate sysctl entry 2009-12-16 18:03:35 +00:00
ip_fw_table.c Various cosmetic cleanup of the files: 2009-12-16 10:48:40 +00:00