PF pflog format

[wolffnx]

Hello, I'm trying to format the pflog(4) file to more simple output, for now like this:

tcpdump -n -e -tttt -v -r /var/log/pflog port 2323 | awk '{print "-" $1 " " $2 "" $3}'

But I discover that tcpdump for awk, break the line in two lines, so awk take one line as two

 

[SirDice]

It's the -v option to tcpdump(1) that dumps additional information on an extra line.

 

[wolffnx]

It's the -v option to tcpdump(1) that dumps additional information on an extra line.

thanks, but (maybe i'm wrong) but without the -v option do not show the date and time in human format

edit, i'm wrong , the time and date are displayed always

 

[SirDice]

edit, i'm wrong , the time and date are displayed always

That's the -tttt option:

       -tttt  Print a timestamp, as hours, minutes, seconds, and fractions of
              a second since midnight, preceded by the date, on each dump
              line.