[netflow-tools] Problem with pfflowd on freebsd 6.0

Damien Miller djm at mindrot.org
Sat Jan 21 10:25:36 EST 2006


Sebastian Schwerdhoefer wrote:
> Damien Miller schrieb am 2006-01-20 um 13:26 Uhr:
> 
>>I have no idea why you aren't seeing PFSYNC_ACT_DEL messages...
>>
>>Could you have your pfflowd.c to printf() the pf->action value? Maybe
>>that will give us a clue.
> 
> 
> pfsync works fine, and state deletions are synchronized too, but
> pfflowd (with a debug message) just prints out:
>     ...
>     DEBUG: ph->action: 1
>     DEBUG: ph->action: 2
>     ...
> No PFSYNC_ACT_DEL message arrives, only PFSYNC_ACT_INS and
> PFSYNC_ACT_UPD. It seems as pfsync (on FreeBSD 6) uses PFSYNC_ACT_UPD
> to notify about state deletions...

Does tcpdump on the pfsync interface see delete events?

-d




More information about the netflow-tools mailing list