Project

General

Profile

Actions
Copy link

Bug #16194

open

IPv6 ICMP firewall log entries marked with protocol "Options" instead of ICMPv6

Added by Jim Pingle 4 months ago. Updated about 1 month ago.

Status:
Confirmed
Priority:
Normal
Assignee:
-
Category:
System Logs
Target version:
2.9.0
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
25.11
Release Notes:
Force Exclusion
Affected Version:
2.9.0
Affected Architecture:

Description

Firewall log entries for ICMPv6 packets are showing a value of "Options" in the Protocol column, but only on development snapshots (Plus 25.07, CE 2.9.0).

Plus 25.03 and CE 2.8.0 builds are not affected.

This may be something that changed in PF and possibly being misinterpreted by pflog/filterlog since that is what shows in the actual log.

Plus 25.07/CE 2.9.0 have this entry in filter.log:

filterlog[68725]: 8,,,1000000107,vtnet1,match,block,in,6,0x00,0x00000,1,Options,0,36,fe80::ae1a:a270:e35e:439b,ff02::16,HBH,RTALERT,0x0000,PADN,

A working log entry from Plus 25.03/2.8.0 looks like this:

filterlog[61925]: 6,,,1000000105,vtnet2,match,block,in,6,0x00,0x00000,1,ICMPv6,58,48,fe80::f847:aeff:fe06:1cbd,ff02::16,

Files

Download all files
clipboard-202505191333-f19mh.png (131 KB) clipboard-202505191333-f19mh.png Jim Pingle, 05/19/2025 05:33 PM
clipboard-202507071118-cesbl.png (90.5 KB) clipboard-202507071118-cesbl.png Jim Pingle, 07/07/2025 03:18 PM
Actions
Copy link

Also available in: Atom PDF