On Aug 24, 2007, at 5:13 PM, Chris Cappuccio wrote:
is there a tool out there that saves records off pfsync for later analysis?(my particular case is to figure out who was spamming behind nat, but i'm sure there are many other uses for something like this)
You probably want pfflowd (http://www.mindrot.org/projects/pfflowd/) which converts pfsync stateful connections into NetFlow datagrams.
--- Jason Dixon DixonGroup Consulting http://www.dixongroup.net
