Project

General

Profile

Actions

Bug #16194

open

IPv6 ICMP firewall log entries marked with protocol "Options" instead of ICMPv6

Added by Jim Pingle 1 day ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
System Logs
Target version:
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
25.07
Release Notes:
Force Exclusion
Affected Version:
2.9.0
Affected Architecture:

Description

Firewall log entries for ICMPv6 packets are showing a value of "Options" in the Protocol column, but only on development snapshots (Plus 25.07, CE 2.9.0).

Plus 25.03 and CE 2.8.0 builds are not affected.

This may be something that changed in PF and possibly being misinterpreted by pflog/filterlog since that is what shows in the actual log.

Plus 25.07/CE 2.9.0 have this entry in filter.log:

filterlog[68725]: 8,,,1000000107,vtnet1,match,block,in,6,0x00,0x00000,1,Options,0,36,fe80::ae1a:a270:e35e:439b,ff02::16,HBH,RTALERT,0x0000,PADN,

A working log entry from Plus 25.03/2.8.0 looks like this:

filterlog[61925]: 6,,,1000000105,vtnet2,match,block,in,6,0x00,0x00000,1,ICMPv6,58,48,fe80::f847:aeff:fe06:1cbd,ff02::16,

Files

clipboard-202505191333-f19mh.png (131 KB) clipboard-202505191333-f19mh.png Jim Pingle, 05/19/2025 05:33 PM

No data to display

Actions

Also available in: Atom PDF