September 16th, 2002, 14:00
IF I just setup a new set of rules for pf, can I view the log in realtime right away?

I have OBSD 3.1 with the bridge setup like in the tutorial. I have a third NIC setup for sshing into it for adminning the sucker.

Currently here is what I am getting:

$ sudo tcpdump -i pflog0
tcpdump: pflog0: Network is down

$ sudo tcpdump -n -e -ttt -r /var/log/pflog
tcpdump: /var/log/pflog: No such file or directory

It does appear that nobody has made an illegal attempt to access my box, hence no filter log.


September 16th, 2002, 14:07
me dumb, I never set up pf=yes in the rc.conf. When I just rebooted I wasnt able to use the logging, and figure Id check everything over again.

Thanks anyway :)

Lesson to the young -- check your work!