Changeset View
Changeset View
Standalone View
Standalone View
share/man/man5/pf.conf.5
| Show First 20 Lines • Show All 1,678 Lines • ▼ Show 20 Lines | |||||
| Used to force logging of all packets for a connection. | Used to force logging of all packets for a connection. | ||||
| This is not necessary when | This is not necessary when | ||||
| .Ar no state | .Ar no state | ||||
| is explicitly specified. | is explicitly specified. | ||||
| As with | As with | ||||
| .Ar log , | .Ar log , | ||||
| packets are logged to | packets are logged to | ||||
| .Xr pflog 4 . | .Xr pflog 4 . | ||||
| .It Ar log (matches) | |||||
| Used to force logging of this packet on all subsequent matching rules. | |||||
| .It Ar log (user) | .It Ar log (user) | ||||
| Logs the | Logs the | ||||
| .Ux | .Ux | ||||
| user ID of the user that owns the socket and the PID of the process that | user ID of the user that owns the socket and the PID of the process that | ||||
| has the socket open where the packet is sourced from or destined to | has the socket open where the packet is sourced from or destined to | ||||
| (depending on which socket is local). | (depending on which socket is local). | ||||
| This is in addition to the normal information logged. | This is in addition to the normal information logged. | ||||
| .Pp | .Pp | ||||
| ▲ Show 20 Lines • Show All 1,517 Lines • ▼ Show 20 Lines | ether-rule = "ether" etheraction [ ( "in" | "out" ) ] | ||||
| [ etherfilteropt-list ] | [ etherfilteropt-list ] | ||||
| pf-rule = action [ ( "in" | "out" ) ] | pf-rule = action [ ( "in" | "out" ) ] | ||||
| [ "log" [ "(" logopts ")"] ] [ "quick" ] | [ "log" [ "(" logopts ")"] ] [ "quick" ] | ||||
| [ "on" ifspec ] [ route ] [ af ] [ protospec ] | [ "on" ifspec ] [ route ] [ af ] [ protospec ] | ||||
| hosts [ filteropt-list ] | hosts [ filteropt-list ] | ||||
| logopts = logopt [ "," logopts ] | logopts = logopt [ "," logopts ] | ||||
| logopt = "all" | "user" | "to" interface-name | logopt = "all" | "matches" | "user" | "to" interface-name | ||||
| etherfilteropt-list = etherfilteropt-list etherfilteropt | etherfilteropt | etherfilteropt-list = etherfilteropt-list etherfilteropt | etherfilteropt | ||||
| etherfilteropt = "tag" string | "tagged" string | "queue" ( string ) | | etherfilteropt = "tag" string | "tagged" string | "queue" ( string ) | | ||||
| "ridentifier" number | "label" string | "ridentifier" number | "label" string | ||||
| filteropt-list = filteropt-list filteropt | filteropt | filteropt-list = filteropt-list filteropt | filteropt | ||||
| filteropt = user | group | flags | icmp-type | icmp6-type | "tos" tos | | filteropt = user | group | flags | icmp-type | icmp6-type | "tos" tos | | ||||
| ( "no" | "keep" | "modulate" | "synproxy" ) "state" | ( "no" | "keep" | "modulate" | "synproxy" ) "state" | ||||
| ▲ Show 20 Lines • Show All 223 Lines • Show Last 20 Lines | |||||