1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Graphical statistics for PF

Discussion in 'Firewalls' started by PascalTurbo, Apr 27, 2012.

  1. PascalTurbo

    PascalTurbo New Member

    Messages:
    2
    Thanks Received:
    0
    Hi there,

    We're using PF as router and firewall. Now I'd love to have some information about "usage" - traffic messuring, statistics about blocked IPs / services and so on.

    Is there any tool out there which solves this? Couldn't find anything - but "PF" is hard to google ;-)

    Thanks,
    Pascal Turbo
     
  2. SirDice

    SirDice Moderator Staff Member Moderator

    Messages:
    17,630
    Thanks Received:
    2,386
    It's not graphical but a handy tool nonetheless, sysutils/pftop.

    I don't think there's anything specific for PF but you might be able to get some nice graphs using net-mgmt/cacti or net-mgmt/mrtg.

    A bit more advanced would be to use NetFlow, net/pfflowd and an aggragator.
     
  3. aa

    aa New Member

    Messages:
    48
    Thanks Received:
    9
  4. aa

    aa New Member

    Messages:
    48
    Thanks Received:
    9
    Umm, graphics.. wireshark?
     
  5. UNIXgod

    UNIXgod New Member

    Messages:
    1,089
    Thanks Received:
    195
    I typed into google "pf openbsd" and found a nice list of info including a faq that covers logging.

    You'll need the bpf() device driver in your kernel:
    Code:
    # The `bpf' device enables the Berkeley Packet Filter.
    # Be aware of the administrative consequences of enabling this!
    # Note that 'bpf' is required for DHCP.
    device          bpf             # Berkeley packet filter
     
  6. PascalTurbo

    PascalTurbo New Member

    Messages:
    2
    Thanks Received:
    0
    Logging isn't the problem. A tcpdump of the log-device does a good job.

    It's more for the statistics
     
  7. Zaid

    Zaid New Member

    Messages:
    6
    Thanks Received:
    2
    wblock@ thanks for this.