Differential D46588

pf: add a new log opt PF_LOG_MATCHES
ClosedPublic
Actions

Authored by kp on Sep 7 2024, 9:35 AM.

Tags

None

Referenced Files

	Unknown Object (File)
	Sun, Oct 19, 10:10 PM

	Unknown Object (File)
	Tue, Sep 30, 10:49 PM

	Unknown Object (File)
	Sep 17 2025, 12:36 PM

	Unknown Object (File)
	Sep 13 2025, 12:58 AM

	Unknown Object (File)
	Sep 9 2025, 11:52 AM

	Unknown Object (File)
	Aug 30 2025, 6:10 AM

	Unknown Object (File)
	Aug 29 2025, 4:28 PM

	Unknown Object (File)
	Aug 14 2025, 11:58 PM

View All 68 Files

Subscribers

vegeta_tuxpowered.net

Details

Reviewers

None

Group Reviewers

network
pfsense

Commits

rGf3ab00c2b607: pf: add a new log opt PF_LOG_MATCHES

Summary

forces logging on all subsequent matching rules
new log opt "matches"
awesome for debugging, a rule like
match log(matches) from $testbox
will show you exactly which subsequent rules match on that packet
real ok theo assumed oks ryan & dlg bikeshedding many

Obtained from: OpenBSD, henning <henning@openbsd.org>, 1603e01ae4
Obtained from: OpenBSD, henning <henning@openbsd.org>, f496e91672
Obtained from: OpenBSD, henning <henning@openbsd.org>, 07481a9fee
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

kp created this revision.Sep 7 2024, 9:35 AM

Herald added subscribers: vegeta_tuxpowered.net, glebius, melifaro and 2 others. · View Herald TranscriptSep 7 2024, 9:35 AM

kp requested review of this revision.Sep 7 2024, 9:35 AM

Harbormaster completed remote builds in B59376: Diff 143084.Sep 7 2024, 9:35 AM

kp added a parent revision: D46587: pf: drop packets if pullup fails.Sep 7 2024, 9:35 AM

kp added a child revision: D46589: pf tests: test the new log(matches) feature.

This revision was not accepted when it landed; it landed in state Needs Review.Sep 19 2024, 8:22 PM

Closed by commit rGf3ab00c2b607: pf: add a new log opt PF_LOG_MATCHES (authored by kp). · Explain Why

This revision was automatically updated to reflect the committed changes.

kp added a commit: rGf3ab00c2b607: pf: add a new log opt PF_LOG_MATCHES.

Revision Contents
Changeset List

Path

Size

sbin/

pfctl/

4 lines

2 lines

share/

man/

man5/

4 lines

sys/

netpfil/

pf/

1 line

8 lines

Diff 143484

sbin/pfctl/parse.y

Loading...

sbin/pfctl/pfctl_parser.c

Loading...

share/man/man5/pf.conf.5

Loading...

sys/netpfil/pf/pf.h

Loading...

sys/netpfil/pf/pf.c

Loading...