summaryrefslogtreecommitdiff
path: root/sbin/pfctl/pf_print_state.c
AgeCommit message (Expand)Author
2009-11-03rtables are stacked on rdomains (it is possible to have multiple routingClaudio Jeker
2009-03-19pfctl -ss printed state levels for ICMPv6. Disable this the sameAlexander Bluhm
2008-09-09welcome pflow(4), a netflow v5 compatible flow export interface.Henning Brauer
2008-08-12use correct byte order when printing state expiration minutes; ok henning@David Krause
2008-06-29Simplify state creation code; merge state import/export code between pfsyncRyan Thomas McBride
2008-06-10save somespace in the state by collapsing two 8 bit ints used as booleansHenning Brauer
2008-06-10in verbose mode indicate which states are sloppy, ryan reyk theoHenning Brauer
2008-05-29Second half of PF state table rearrangement.Ryan Thomas McBride
2008-05-09Add support to kill states by rule label or state id.Marco Pfatschbacher
2007-08-30add support for address ranges ("from 10.1.2.50 - 10.1.3.75") in from/toDaniel Hartmeier
2007-05-31Cope with new ioctl interface (use pfsync_state instead of pf_state)Ryan Thomas McBride
2007-03-01be more careful with mixing &/| with &&/||, ok ottoTheo de Raadt
2006-03-14implement a Unicast Reverse Path Forwarding (uRPF) check for pf(4)Damien Miller
2005-11-04crank pf_state and pf_src_node byte and packet counters to u_in64_t, sinceRyan Thomas McBride
2005-05-24Identify states that will not be synchronised in pfctl -vvss output.Christopher Pascoe
2004-12-10allow pf to filter on route labelsHenning Brauer
2004-02-10fix at leats the worst of Cedric "KNF is for everybody but me" Berger's fuckupHenning Brauer
2004-01-26we must not omit printing the netmask when it is all zero, this is dangerous -Henning Brauer
2003-12-31Many improvements to the handling of interfaces in PF.Cedric Berger
2003-12-27Remove extra \n from pf_print_state().Ryan Thomas McBride
2003-12-15Add initial support for pf state synchronization over the network.Ryan Thomas McBride
2003-12-15Add support to track stateful connections by source ip. This allows usRyan Thomas McBride
2003-07-06knf (cedric did not do it right)Theo de Raadt
2003-07-04KNFHenning Brauer
2003-06-21count packets and bidirectionally on state entries, allowing for fine-grainedDamien Miller
2003-06-20some cleanings recommended by lint; dhartmei okTheo de Raadt
2003-06-07in print_host(), don't set the mask blindly to /128 but adhere to theHenning Brauer
2003-05-19print out the full netmask; don't just ignore the upper bits in the v4 caseHenning Brauer
2003-05-17Fix proxy related output.Daniel Hartmeier
2003-05-16TCP SYN proxy. Instead of 'keep state' or 'modulate state', one can useDaniel Hartmeier
2003-04-09on "pfctl -vvss", print the anchor rule number when there is one.Cedric Berger
2003-04-03Simplify pfctl printing code.Cedric Berger
2003-03-24Add missing return. Fix following buglet:Cedric Berger
2003-03-08Remove unneeded #includes, from Andrey Matveev andrushock(at)pisem(dot)netDaniel Hartmeier
2003-01-21Support for TCP window scaling (RFC 1323). ok frantzen@Daniel Hartmeier
2003-01-20Remove unused argument from print_name() and fix two other nitsCamiel Dobbelaar
2003-01-20Improve pfctl -vvs{r,n} output with rule containing tables.Cedric Berger
2003-01-07Remove table name hashing (pass the name in each ioctl instead), andDaniel Hartmeier
2003-01-05Move ifname from pf_addr to pf_addr_wrap, prepare pf_addr_wrap for tableDaniel Hartmeier
2003-01-04I do not know where this policy of "one .h file for every .c file" comesTheo de Raadt
2003-01-03Bring in userland code for accessing PF radix tables.Cedric Berger
2002-12-18rule.nr USHRT_MAX -> -1, to detect states whose creating rules areDaniel Hartmeier
2002-11-30move unmask back into pf_print_state.c where it was, and please keep it there...Michael Shalayeff
2002-11-29no need for extra hrs; henning@ okMichael Shalayeff
2002-11-23KNFTheo de Raadt
2002-11-23code to support loading of pf rules with multiple redirection addressesRyan Thomas McBride
2002-11-02%i -> %d, matches the style of existing code, from millert@Daniel Hartmeier
2002-11-02printf int with %i, not %u. from pilot@monkey.org.Daniel Hartmeier
2002-10-25- more sa_family_tCamiel Dobbelaar
2002-10-22More conversion of "int af" and "u_int8_t af" declarations and functionRyan Thomas McBride