Todo #2109: pfSense on FreeBSD 10.x
pfctl -ss output has changed on FreeBSD 10
The state parsing code in diag_dump_states.php and elsewhere needs updated since on FreeBSD 9.x the format of the state output has changed.
For example, previously a NAT state looked like so:
all tcp internalip:64123 -> externalip:39329 -> destinationip:80 ESTABLISHED:ESTABLISHED
And now it looks like:
all tcp externalip:37706 (internalip:1051) -> destinaionip:80 ESTABLISHED:ESTABLISHED
Updated by Jim Pingle over 10 years ago
I think I prefer the new output, it's a clearer separation for which is the internal IP rather than guess by counting ->'s
Probably need some more output examples though (say, from 1:1 NAT and port forwards) to really say how hard it might be to adjust.
Updated by Jim Pingle over 8 years ago
The format is slightly different on 10.x than 9.x examples above.
In this sample output, 192.0.2.x is WAN on em0, 192.168.94.x is LAN on em1
em0 icmp 192.0.2.89:32114 -> 192.0.2.1:32114 0:0 em0 icmp 192.0.2.89:44428 (192.168.94.1:26879) -> 188.8.131.52:44428 0:0 lo0 udp 127.0.0.1:43924 -> 127.0.0.1:53 MULTIPLE:SINGLE em0 tcp 192.168.94.99:999 (192.0.2.89:999) <- 192.0.2.31:59269 CLOSED:SYN_SENT em1 tcp 192.0.2.31:59269 -> 192.168.94.99:999 SYN_SENT:CLOSED
The first column for the interface should probably be parsed and printed on the page now that it is meaningful.
Updated by Thiago Basilio over 7 years ago
Latest snapshot seems OK.
(pfctl -ss output)
$ pfctl -ss re1 tcp 192.168.228.18:8530 <- 192.168.1.100:1049 ESTABLISHED:ESTABLISHED re0 icmp 192.168.228.107:6213 -> 192.168.228.1:6213 0:0 lo0 ipv6-icmp ff02::1 <- fe80::1:1 NO_TRAFFIC:NO_TRAFFIC re1 ipv6-icmp fe80::1:1 -> ff02::1 NO_TRAFFIC:NO_TRAFFIC re1 tcp 192.168.1.1:443 <- 192.168.1.100:1195 ESTABLISHED:ESTABLISHED re0 tcp 192.168.228.107:46232 -> 184.108.40.206:443 FIN_WAIT_2:FIN_WAIT_2
For diag_dump_states.php output, there is a image attached.
pfSense 2.2-BETA amd64
Firefox ESR 24.8.0 win32