pfsync is version 3 in RELENG_7

'uname -rms' -> FreeBSD 7.0-STABLE i386

i am looking for a way to get traffic statistics.  with
"device
pf{,log,sync}" in the kernel config, i have the pfsync
device, and
net/pfflowd should analyze the state changes from pf.

i get this:

  # pfflowd -D
  No export target defined
  ZZZZ -1
  pfflowd[40130]: pfflowd listening on pfsync0
  pfflowd[40130]: Unsupported pfsync version 3, exiting

although http://pf4freebsd.l
ove2party.net/ states:

  "In RELENG_7 - pf is at OpenBSD 4.1"

shouldn't pfsync be of a more recent version, then?

regards, clemens

_______________________________________________
freebsd-pffreebsd.org mailing list

http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to
"freebsd-pf-unsubscribefreebsd.org"

On Thu, 06 Mar 2008 18:38:11 +0100 clemens fischer wrote:

> i get this:
> 
>  # pfflowd -D
>  No export target defined
>  ZZZZ -1
>  pfflowd[40130]: pfflowd listening on pfsync0
>  pfflowd[40130]: Unsupported pfsync version 3, exiting
> 
> although http://pf4freebsd.l
ove2party.net/ states:
> 
>  "In RELENG_7 - pf is at OpenBSD 4.1"
> 
> shouldn't pfsync be of a more recent version, then?

comparing the sources in
/usr/src/sys/contrib/pf/net/if_pfsync.[ch] and
pfflowd/pfflowd-0.6/pfflowd.[ch] , it turns out that pfflowd
expects the
version in struct pfsync_header.version to be `2', not even
`3', so it
is too low.  so is this a ports issue?  in this case, i'd
simply file
a PR ...

regards, clemens

_______________________________________________
freebsd-pffreebsd.org mailing list

http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to
"freebsd-pf-unsubscribefreebsd.org"

According to clemens fischer:
>   "In RELENG_7 - pf is at OpenBSD 4.1"
> 
> shouldn't pfsync be of a more recent version, then?

Yes, you need pfflowd 0.7 to understand pfsync3.
-- 
Ollivier ROBERT -=- FreeBSD: The Power to Serve! -=-
robertokeltia.freenix.fr
Darwin sidhe.keltia.net Version 9.2.0: Tue Feb  5 16:13:22
PST 2008; i386

_______________________________________________
freebsd-pffreebsd.org mailing list

http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to
"freebsd-pf-unsubscribefreebsd.org"

On Thu, Mar 06, 2008 at 07:47:12PM +0100, Ollivier Robert
wrote:
> According to clemens fischer:
> >   "In RELENG_7 - pf is at OpenBSD 4.1"
> > 
> > shouldn't pfsync be of a more recent version,
then?
> 
> Yes, you need pfflowd 0.7 to understand pfsync3.

I'm listed as the port maintainer but havnt updated it in
years, if
anyone wants to update the port and take ownership then feel
free.


Andrew
_______________________________________________
freebsd-pffreebsd.org mailing list

http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to
"freebsd-pf-unsubscribefreebsd.org"

Andrew Thompson:

> Ollivier Robert wrote:
>
>> According to clemens fischer:
>>
>> >   "In RELENG_7 - pf is at OpenBSD
4.1"
>> >
>> > shouldn't pfsync be of a more recent version,
then?
>>
>> Yes, you need pfflowd 0.7 to understand pfsync3.
>
> I'm listed as the port maintainer but havnt updated it
in years, if
> anyone wants to update the port and take ownership then
feel free.

well, your port is good nonetheless.  i looked up the
download URL, got
pfflowd-0.7 and fixed it up using your patches.  the most
significant
change in 0.7 are the 64-bit counters for bytes and packets
and, of
course, the version bump in the protocol header.

it really is straight forward, could you please handle this
for 0.7?
you can use your previous patches almost unchanged.  if not:
 i won't
take the port, but i'd be willing to send the diffs on
request.

regards, clemens

_______________________________________________
freebsd-pffreebsd.org mailing list

http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to
"freebsd-pf-unsubscribefreebsd.org"