https://redmine.pfsense.org/https://redmine.pfsense.org/favicon.ico?16780521162012-01-20T15:32:24ZpfSense bugtrackerpfSense - Bug #2121: pfctl -ss output has changed on FreeBSD 10https://redmine.pfsense.org/issues/2121?journal_id=76082012-01-20T15:32:24ZSeth Mosseth.mos@dds.nl
<ul></ul><p>maybe fixup on the state print patches so that the -> is added back?</p> pfSense - Bug #2121: pfctl -ss output has changed on FreeBSD 10https://redmine.pfsense.org/issues/2121?journal_id=76092012-01-20T15:35:15ZJim Pingle
<ul></ul><p>I think I prefer the new output, it's a clearer separation for which is the internal IP rather than guess by counting ->'s</p>
<p>Probably need some more output examples though (say, from 1:1 NAT and port forwards) to really say how hard it might be to adjust.</p> pfSense - Bug #2121: pfctl -ss output has changed on FreeBSD 10https://redmine.pfsense.org/issues/2121?journal_id=76112012-01-20T17:26:09ZErik Fonnesbeck
<ul></ul><p>Looks like the format for the changed part is like this:</p>
<p>NAT on destination (port forward)<br /><code>destination_after_nat (destination_before_nat) <- source</code></p>
<p>NAT on source (outbound NAT)<br /><code>source_after_nat (source_before_nat) -> destination</code></p> pfSense - Bug #2121: pfctl -ss output has changed on FreeBSD 10https://redmine.pfsense.org/issues/2121?journal_id=76162012-01-21T14:43:07ZJim Pingle
<ul><li><strong>Parent task</strong> set to <i>#2109</i></li></ul> pfSense - Bug #2121: pfctl -ss output has changed on FreeBSD 10https://redmine.pfsense.org/issues/2121?journal_id=79572012-02-26T18:25:43ZJim Pingle
<ul><li><strong>Target version</strong> changed from <i>2.1</i> to <i>2.2</i></li></ul> pfSense - Bug #2121: pfctl -ss output has changed on FreeBSD 10https://redmine.pfsense.org/issues/2121?journal_id=84672012-03-28T20:05:08ZChris Buechlercbuechler@gmail.com
<ul><li><strong>Affected Version</strong> changed from <i>2.1</i> to <i>2.2</i></li></ul> pfSense - Bug #2121: pfctl -ss output has changed on FreeBSD 10https://redmine.pfsense.org/issues/2121?journal_id=129002013-12-09T07:10:08ZRenato Botelhorenato@netgate.com
<ul><li><strong>Subject</strong> changed from <i>pfctl -ss output has changed on FreeBSD 9</i> to <i>pfctl -ss output has changed on FreeBSD 10</i></li></ul> pfSense - Bug #2121: pfctl -ss output has changed on FreeBSD 10https://redmine.pfsense.org/issues/2121?journal_id=129212013-12-12T10:38:00ZJim Pingle
<ul></ul><p>The format is slightly different on 10.x than 9.x examples above.<br />In this sample output, 192.0.2.x is WAN on em0, 192.168.94.x is LAN on em1<br /><pre>
em0 icmp 192.0.2.89:32114 -> 192.0.2.1:32114 0:0
em0 icmp 192.0.2.89:44428 (192.168.94.1:26879) -> 74.125.225.114:44428 0:0
lo0 udp 127.0.0.1:43924 -> 127.0.0.1:53 MULTIPLE:SINGLE
em0 tcp 192.168.94.99:999 (192.0.2.89:999) <- 192.0.2.31:59269 CLOSED:SYN_SENT
em1 tcp 192.0.2.31:59269 -> 192.168.94.99:999 SYN_SENT:CLOSED
</pre></p>
<p>The first column for the interface should probably be parsed and printed on the page now that it is meaningful.</p> pfSense - Bug #2121: pfctl -ss output has changed on FreeBSD 10https://redmine.pfsense.org/issues/2121?journal_id=140672014-06-04T13:30:10ZJim Pingle
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Feedback</i></li><li><strong>% Done</strong> changed from <i>0</i> to <i>100</i></li></ul><p>Applied in changeset <a class="changeset" title="Various fixes to diag_dump_states.php (Add interface column, some extra validation safety, etc). ..." href="https://redmine.pfsense.org/projects/pfsense/repository/2/revisions/5344099abc7e490e63c9dacfb311c3fb3cc38de7">5344099abc7e490e63c9dacfb311c3fb3cc38de7</a>.</p> pfSense - Bug #2121: pfctl -ss output has changed on FreeBSD 10https://redmine.pfsense.org/issues/2121?journal_id=147082014-09-01T11:55:34ZJim Thompsonjim@netgate.com
<ul><li><strong>Assignee</strong> set to <i>Jim Pingle</i></li></ul> pfSense - Bug #2121: pfctl -ss output has changed on FreeBSD 10https://redmine.pfsense.org/issues/2121?journal_id=147332014-09-05T13:18:07ZJim Pingle
<ul><li><strong>Status</strong> changed from <i>Feedback</i> to <i>New</i></li></ul><p>Moving this back to New. The states table display is OK now but diag_states_summary.php breaks with the new formatting.</p> pfSense - Bug #2121: pfctl -ss output has changed on FreeBSD 10https://redmine.pfsense.org/issues/2121?journal_id=147342014-09-05T14:00:10ZJim Pingle
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Feedback</i></li></ul><p>Applied in changeset <a class="changeset" title="Adjust states summary for new pfctl -ss output. Fixes #2121" href="https://redmine.pfsense.org/projects/pfsense/repository/2/revisions/c245a8460ab318d527f1c51cfc53f76494208885">c245a8460ab318d527f1c51cfc53f76494208885</a>.</p> pfSense - Bug #2121: pfctl -ss output has changed on FreeBSD 10https://redmine.pfsense.org/issues/2121?journal_id=148522014-09-22T09:13:56ZThiago Basilionanga@nanga.com.br
<ul><li><strong>File</strong> <a href="/attachments/1033">diag_dump_states.png</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/1033/diag_dump_states.png">diag_dump_states.png</a> added</li></ul><p>Latest snapshot seems OK.</p>
<p>(pfctl -ss output)<br /><pre>
$ pfctl -ss
re1 tcp 192.168.228.18:8530 <- 192.168.1.100:1049 ESTABLISHED:ESTABLISHED
re0 icmp 192.168.228.107:6213 -> 192.168.228.1:6213 0:0
lo0 ipv6-icmp ff02::1[16448] <- fe80::1:1[16448] NO_TRAFFIC:NO_TRAFFIC
re1 ipv6-icmp fe80::1:1[16448] -> ff02::1[16448] NO_TRAFFIC:NO_TRAFFIC
re1 tcp 192.168.1.1:443 <- 192.168.1.100:1195 ESTABLISHED:ESTABLISHED
re0 tcp 192.168.228.107:46232 -> 208.123.73.83:443 FIN_WAIT_2:FIN_WAIT_2
</pre></p>
<p>For diag_dump_states.php output, there is a image attached.</p>
<p>..<br />pfSense 2.2-BETA amd64<br />Firefox ESR 24.8.0 win32<br />..</p> pfSense - Bug #2121: pfctl -ss output has changed on FreeBSD 10https://redmine.pfsense.org/issues/2121?journal_id=148542014-09-22T09:21:04ZJim Pingle
<ul><li><strong>Status</strong> changed from <i>Feedback</i> to <i>Resolved</i></li></ul>