summaryrefslogtreecommitdiff
path: root/sbin/pflogd
AgeCommit message (Collapse)Author
2012-12-04remove some unnecessary sys/param.h inclusionsTheo de Raadt
2012-11-06Ensure that if_exists() always closes its socket before returning.Lawrence Teo
Also fix a bug where the return value of if_exists() was not checked correctly if the interface disappears while pflogd is running. ok beck henning
2012-06-25log all, not log-all; ok henningJason McIntyre
2012-04-04Return an error much earlier if recvmsg failsTheo de Raadt
2012-03-05fix format string:Henning Brauer
use %zu for size_t and %d for signed ints first one triggered by a mail from joerg @ netbsd, thanks. ok millert dlg
2011-10-12default snaplen is 160 these daysHenning Brauer
From: giovanni <qgiovanni at gmail dot com>
2011-05-06put the tcpdump-specific stuff in a sane place (that is, not EXAMPLES);Jason McIntyre
ok sthen henning
2010-09-21bump default snaplen so that pfloghdr + ip hdr + prot hdr usually fitHenning Brauer
2010-05-14nowadays, .Dx is callable, so we need to quote it;Ingo Schwarze
ok jmc@ millert@ henning@ kristaps@
2009-12-24spelling fixes, from Brad Tilley; we will not fix src/sbin/dump/dump.hIgor Sobrado
as neither arrayified not arrayfied exist -- sanctioned dictionaries like Merriam-Webster ones suggest a few alternatives (e.g., arrayed), however these made up words are easy to understand and we are not certain that current ones are not ok. ok jmc@
2009-12-03Adjust pflog BPF descriptions, problem pointed out by jmc@Stuart Henderson
- sync actions with PF changes (pass/block/match not just pass/block, and remove some binat/nat/rdr entries) - list all reason codes in tcpdump(8) ok henning jmc
2009-11-16pflogd no longer needs libutil; ok deraadt@Otto Moerbeek
2009-11-04tweak previous;Jason McIntyre
2009-11-03Get rid of pflogd.pid because the privsep child cannot delete the pidfile;Theo de Raadt
use pkill(1) in /etc/newsyslog.conf instead together with otto and suggestions from tedu
2008-10-22log pcap stats upon SIGUSR1; ok canacarHenning Brauer
From: Dave Harrison <dave@nullcube.com>
2008-03-24msg_controllen has to be CMSG_SPACE so that the kernel can account forTheo de Raadt
each cmsg_len (ie. msg_controllen = sum of CMSG_ALIGN(cmsg_len). This works now that kernel fd passing has been fixed to accept a bit of sloppiness because of this ABI repair. lots of discussion with kettenis
2008-03-15Repair the simple cases for msg_controllen where it should just beTheo de Raadt
CMSG_SIZE(sizeof(int)), not sizeof(buffer) which may be larger because of alignment; ok kettenis hshoexer
2008-03-13Correct CMSG_SPACE and CMSG_LEN usage everywhere in the tree. Due toTheo de Raadt
an extensive discussion with otto, kettenis, millert, and hshoexer
2008-01-14clear up pidfile(-p) option formOkan Demirmen
tweaked by jmc, ok henning
2007-06-06fix oups, mlist@scapa.dnsalias.netHenning Brauer
2007-06-06reverse logic of if_exists so that if_exists(interface) is true ifHenning Brauer
interface exists and !if_exists(interface) is when it doesn't
2007-06-04use warn() where warn() is intended, not err()Henning Brauer
exit nonzero if the inetrface does not exist From: tbert <bret.lambert@gmail.com>
2007-06-02do not shadow globals (in if_exists)Henning Brauer
2007-06-02on pcap error, check wether the interface went away and exit if it did.Henning Brauer
spinning and flooding syslog in that case was not so nice.
2007-05-31convert to new .Dd format;Jason McIntyre
2007-05-27Complain to stderr if cloned pflog interface doesn't exist. Previously only ↵Jason Dixon
logged LOG_ERR to syslog. ok henning@
2007-04-07- use .Bk/.Ek to avoid SYNOPSIS splittingJason McIntyre
- put -p in the correct place - sync the -p argument name and tweak its description - add -p to usage()
2007-04-06Adds a pidfile argument to pflogd so that individualCan Erkin Acar
instances can be rotated via newsyslog. From Berk Demir < bdd at mindcast org > ok henning@
2006-12-08state that if the log file is bad, it is first moved out of the way. ifJoel Knight
that fails, then logging is suspended.
2006-12-06styleMichael Knudsen
2006-11-26repair missing DPADD requestsTheo de Raadt
2006-11-19Default snaplen has been 116 for a while now.Joel Knight
2006-10-26- sort optionsJason McIntyre
- sync usage()
2006-10-25Remove some unneeded externs. OK canacar@Moritz Jodeit
2006-10-25allow pflogd to listen on alternate pflog interfacesHenning Brauer
"Berk D. Demir" <bdd@mindcast.org> sent a diff in private, and then it evolved quite a bit... ok djm canacar berk
2006-03-06convert permanent privilege revocation to use setresuid/setresgid;Damien Miller
ok henning@
2006-01-15If the log file is invalid/incompatible, try to rename the bad log fileCan Erkin Acar
and continue with a new name instead of suspending. ok mcbride@
2005-07-04do not whack errno before using it; Andrey MatveevTheo de Raadt
2005-05-27filtering on ruleset name is already implemented, document it.Daniel Hartmeier
2005-04-14sync the list of acceptable values for 'reason' with realityJoel Knight
2005-02-09missing tzset(), noticed by Chris Kuethe <chris.kuethe@gmail.com>Henning Brauer
2005-01-08Use the handler specified in phandler instead of always usingCan Erkin Acar
dump_packet. Report and patch from Peter Postma, thanks.
2005-01-02"bad-timestamp" is a valid logging reason;Jason McIntyre
from joel knight;
2004-12-22also pass SIGINT/QUIT to child, from mpech@. ok avsm@Otto Moerbeek
2004-09-17ugly spacingTheo de Raadt
2004-08-13extra check for no message case; ok markus, deraadt, hshoexer, henningDamien Miller
2004-08-08spacingTheo de Raadt
2004-07-14no \n in errx(3)Henning Brauer
From: Andrey Matveev <andrushock@korovino.net>
2004-05-23use strtonum instead of atoi; dhartmei okTheo de Raadt
2004-04-28fd leaks; henning okTheo de Raadt