mention the new pflow(4) features: bpf support and multiple interfaces

OK: henning@

1 files changed, 19 insertions, 2 deletions

diff --git a/share/man/man4/pflow.4 b/share/man/man4/pflow.4
index cf0f4f06a57..710e168dd23 100644
--- a/share/man/man4/pflow.4
+++ b/share/man/man4/pflow.4
@@ -1,4 +1,4 @@
-.\" $OpenBSD: pflow.4,v 1.7 2008/10/10 13:55:25 sobrado Exp $
+.\" $OpenBSD: pflow.4,v 1.8 2008/10/28 16:55:37 gollo Exp $
 .\"
 .\" Copyright (c) 2008 Henning Brauer <henning@openbsd.org>
 .\" Copyright (c) 2008 Joerg Goltermann <jg@osn.de>
@@ -15,7 +15,7 @@
 .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISINGOUT OF
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\"
-.Dd $Mdocdate: October 10 2008 $
+.Dd $Mdocdate: October 28 2008 $
 .Dt PFLOW 4
 .Os
 .Sh NAME
@@ -37,6 +37,14 @@ The data is extracted from the
 .Xr pf 4
 state table.
 .Pp
+Multiple
+.Nm
+interfaces can be created at runtime using the
+.Ic ifconfig pflow Ns Ar N Ic create
+command.
+Each interface must be configured with a flow receiver IP address and
+port number.
+.Pp
 Only states created by a rule marked with the
 .Ar pflow
 keyword are exported by the
@@ -62,6 +70,15 @@ ID and type.
 Header and flow structs are defined in
 .Aq Pa net/if_pflow.h .
 .Pp
+There is a one-to-one correspondence between packets seen by
+.Xr bpf 4
+on the
+.Nm
+interface, and packets sent out to the flow receiver, i.e.\&
+a packet with 30 flows on
+.Nm
+means that the same 30 flows were sent out to the receiver.
+.Pp
 The
 .Nm
 source and destination addresses are controlled by