Graphical statistics for PF

[PascalTurbo]

Hi there,

We're using PF as router and firewall. Now I'd love to have some information about "usage" - traffic messuring, statistics about blocked IPs / services and so on.

Is there any tool out there which solves this? Couldn't find anything - but "PF" is hard to google ;-)

Thanks,
Pascal Turbo

 

[SirDice]

It's not graphical but a handy tool nonetheless, sysutils/pftop.

I don't think there's anything specific for PF but you might be able to get some nice graphs using net-mgmt/cacti or net-mgmt/mrtg.

A bit more advanced would be to use NetFlow, net/pfflowd and an aggragator.

 

[aa]

tcpdump() your pflog.

 

[aa]

Umm, graphics.. wireshark?

 

[UNIXgod]

I typed into google "pf openbsd" and found a nice list of info including a faq that covers logging.

You'll need the bpf() device driver in your kernel:

# The `bpf' device enables the Berkeley Packet Filter.
# Be aware of the administrative consequences of enabling this!
# Note that 'bpf' is required for DHCP.
device          bpf             # Berkeley packet filter

 

[PascalTurbo]

Logging isn't the problem. A tcpdump of the log-device does a good job.

It's more for the statistics

 

[Zaid]

You can also try sysutils/pfstat.