[schotty]

IF I just setup a new set of rules for pf, can I view the log in realtime right away?

I have OBSD 3.1 with the bridge setup like in the tutorial. I have a third NIC setup for sshing into it for adminning the sucker.

Currently here is what I am getting:

[code:1:25a95aed32]
$ sudo tcpdump -i pflog0
tcpdump: pflog0: Network is down
$

$ sudo tcpdump -n -e -ttt -r /var/log/pflog
tcpdump: /var/log/pflog: No such file or directory
$
[/code:1:25a95aed32]

It does appear that nobody has made an illegal attempt to access my box, hence no filter log.

TIA!

[schotty]

me dumb, I never set up pf=yes in the rc.conf. When I just rebooted I wasnt able to use the logging, and figure Id check everything over again.

Thanks anyway :)

Lesson to the young -- check your work!