Re: pf not logging on 5.3-BETA3 ? [more info]

> On Friday 17 September 2004 20:51, Hugo Silva wrote:
>>  Did you put in "device pflog" as well? What does "$ifconfig pflog0"
>> say?
>>
>> [root_at_evilreborn:/home/klr]# ifconfig pflog0
>> pflog0: flags=41<UP,RUNNING> mtu 33208
>
> Okay, for some reason pflogd is *not* running! Otherwise you'd have pflog0
> in
> PROMIC mode:
>  pflog0: flags=141<UP,RUNNING,PROMISC> mtu 33208
> so we have to find out why it is not. Try starting it by hand and watch
> your
> daemon log closely. I can't reproduce the problem in any system (be it
> BETA3
> from disc, RELENG_5 or CURRENT) so I am afraid that something is wrong
> with
> your setup. Nontheless this *should* not happen ...
>
> If the problem is persistent, please file a PR reconstructing possible
> much
> information about how you got the system into the stage it is now (i.e.
> how
> did you install/update?). Thanks
>

Hey,

pflogd seems to start with the system (pf_logd set), but it exits. Same as
if I do it manually:

[root_at_evilreborn:/usr/local/etc/rc.d]# pflogd
[root_at_evilreborn:/usr/local/etc/rc.d]# ps aux | grep pflogd
root 14806  0.0  0.3   348  208  p0  R+    8:30PM   0:00.00 grep pflogd

[root_at_evilreborn:/usr/local/etc/rc.d]# which pflogd
/sbin/pflogd
[root_at_evilreborn:/usr/local/etc/rc.d]# file /sbin/pflogd
/sbin/pflogd: ELF 32-bit LSB executable, Intel 80386, version 1 (FreeBSD),
for FreeBSD 5.3, dynamically linked (uses shared libs), stripped

-

/var/log/messages shows this whenever i try to run pflogd:

Sep 18 20:31:47 evilreborn kernel: pflog0: promiscuous mode enabled
Sep 18 20:31:47 evilreborn kernel: pflog0: promiscuous mode disabled

Another oddity, I had to add ifconfig pflog0 up to a startup script to
make my pflog (read logs on pflog0 normally..) work, else it would
complain:

[root_at_evilreborn:/usr/local/etc/rc.d]# pflog
tcpdump: BIOCSETIF: pflog0: Network is down

I don't remember having to ifconfig pflog0 up on 5.2.1-RELEASE-p9 (another
server) with pf from ports.


I updated from 5.2.1-RELEASE (installed by cdrom) to RELENG_5 (BETA3 at
the time) by cvsup.

>> If more info is needed, let me know. I don't think this is an obvious
>> mistake of me (altough it could be, I haven't looked to this problem in
>> the last days, must take some time to look more carefully at it).
>>
>> As a reminder, the system is:
>> FreeBSD evilreborn 5.3-BETA3 FreeBSD 5.3-BETA3 #0: Wed Sep 15 19:18:51
>> WEST 2004
>> klr_at_evilreborn:/usr/src/sys/i386/compile/evilreborn53-kernel
>>  i386
>>
>> >> --
>> >> /"\  Best regards,                      | mlaier_at_freebsd.org
>> >> \ /  Max Laier                          | ICQ #67774661
>> >>  X   http://pf4freebsd.love2party.net/  | mlaier_at_EFnet
>> >> / \  ASCII Ribbon Campaign              | Against HTML Mail and News
>>
>> Best Regards,
>>
>> Hugo
>
> --
> /"\  Best regards,                      | mlaier_at_freebsd.org
> \ /  Max Laier                          | ICQ #67774661
>  X   http://pf4freebsd.love2party.net/  | mlaier_at_EFnet
> / \  ASCII Ribbon Campaign              | Against HTML Mail and News
>


-- 
www.6s-gaming.com