PF.OS(5) - File Formats Manual # PF.OS(5) - File Formats Manual NAME # pf.os - format of the operating system fingerprints file DESCRIPTION # The pf(4) firewall and the tcpdump(8) program can both fingerprint the operating system of hosts that originate an IPv4 TCP connection. The file consists of newline-separated records, one per fingerprint, containing nine colon (’:’) separated fields. These fields are as follows: window The TCP window size. ...
PF(4) - Device Drivers Manual # PF(4) - Device Drivers Manual NAME # pf - packet filter SYNOPSIS # pseudo-device pf DESCRIPTION # Packet filtering takes place in the kernel. A pseudo-device, /dev/pf, allows userland processes to control the behavior of the packet filter through an ioctl(2) interface. There are commands to enable and disable the filter, load rulesets, add and remove individual rules or state table entries, and retrieve statistics. ...
PFCTL(8) - System Manager’s Manual # PFCTL(8) - System Manager’s Manual NAME # pfctl - control the packet filter (PF) device SYNOPSIS # pfctl [-deghNnPqrvz] [-a anchor] [-D macro=value] [-F modifier] [-f file] [-i interface] [-K key] [-k key] [-L statefile] [-o level] [-p device] [-S statefile] [-s modifier [-R id]] [-t table -T command [address …]] [-V rdomain] [-x level] DESCRIPTION # The pfctl utility communicates with the packet filter device using the ioctl interface described in pf(4). ...
PFLOG(4) - Device Drivers Manual # PFLOG(4) - Device Drivers Manual NAME # pflog - packet filter logging interface SYNOPSIS # pseudo-device pflog DESCRIPTION # The pflog interface is a pseudo-device which makes visible all packets logged by the packet filter, pf(4). Logged packets can easily be monitored in real time by invoking tcpdump(8) on the pflog interface, or stored to disk using pflogd(8). The pflog0 interface is created automatically at boot if both pf(4) and pflogd(8) are enabled; further instances can be created using ifconfig(8). ...
PFLOGD(8) - System Manager’s Manual # PFLOGD(8) - System Manager’s Manual NAME # pflogd - packet filter logging daemon SYNOPSIS # pflogd [-Dx] [-d delay] [-f filename] [-i interface] [-s snaplen] [expression] DESCRIPTION # pflogd is a background daemon which reads packets logged by pf(4) to a pflog(4) interface, normally pflog0, and writes the packets to a logfile (normally /var/log/pflog) in tcpdump(8) binary format. These logs can be reviewed later using the -r option of tcpdump(8), hopefully offline in case there are bugs in the packet parsing code of tcpdump(8). ...
PFLOW(4) - Device Drivers Manual # PFLOW(4) - Device Drivers Manual NAME # pflow - kernel interface for pflow data export SYNOPSIS # pseudo-device pflow DESCRIPTION # The pflow interface is a pseudo-device which exports pflow accounting data from the kernel using udp(4) packets. pflow is compatible with netflow version 5 and IPFIX (10). The data is extracted from the pf(4) state table. Multiple pflow interfaces can be created at runtime using the ifconfig pflow‌N create command. ...
PFSYNC(4) - Device Drivers Manual # PFSYNC(4) - Device Drivers Manual NAME # pfsync - packet filter state table synchronisation interface SYNOPSIS # pseudo-device pfsync DESCRIPTION # The pfsync interface is a pseudo-device which exposes certain changes to the state table used by pf(4). State changes can be viewed by invoking tcpdump(8) on the pfsync interface. If configured with a physical synchronisation interface, pfsync will also send state changes out on that interface, and insert state changes received on that interface from other systems into the state table. ...
TCPDUMP(8) - System Manager’s Manual # TCPDUMP(8) - System Manager’s Manual NAME # tcpdump - dump traffic on a network SYNOPSIS # tcpdump [-AadefILlNnOopqStvXx] [-B fildrop] [-c count] [-D direction] [-E [espalg:]espkey] [-F file] [-i interface] [-r file] [-s snaplen] [-T type] [-w file] [-y datalinktype] [expression] DESCRIPTION # tcpdump prints out the headers of packets on a network interface that match the boolean expression. You must have read access to /dev/bpf. ...
TFTP-PROXY(8) - System Manager’s Manual # TFTP-PROXY(8) - System Manager’s Manual NAME # tftp-proxy - Internet Trivial File Transfer Protocol proxy SYNOPSIS # tftp-proxy [-46dv] [-a address] [-l address] [-p port] [-w transwait] DESCRIPTION # tftp-proxy is a proxy for the Internet Trivial File Transfer Protocol. TFTP connections should be redirected to the proxy using a pf(4) rule using the divert-to option, after which the proxy connects to the server on behalf of the client. ...
TPMR(4) - Device Drivers Manual # TPMR(4) - Device Drivers Manual NAME # tpmr - IEEE 802.1Q Two-Port MAC Relay interface SYNOPSIS # pseudo-device tpmr DESCRIPTION # The tpmr driver implements an 802.1Q (originally 802.1aj) Two-Port MAC Relay (TPMR). A TPMR is a simplified Ethernet bridge with exactly two member ports, and it unconditionally relays Ethernet packets between those ports. tpmr interfaces can be created at runtime using the ifconfig tpmr‌N create command or by setting up a hostname. ...