Re: pfstat gives errors on -current

2009-03-28 Thread Markus Lude
On Thu, Mar 26, 2009 at 01:36:00PM +0100, Daniel Hartmeier wrote:
 On Thu, Mar 26, 2009 at 01:11:49PM +0100, Markus Lude wrote:
 
  Hello,
  after updating to the recent snapshot from march 24th I now get errors
  when running pfstat:
  
  ioctl: DIOCIGETIFACES: Operation not supported by device
  pf_query: query_ifaces() failed
  
  Probably something changed in the pf code.
 
 That just means the pfstat binary doesn't match the newer kernel,
 and needs to be rebuilt.
  
 But the rebuild of pfstat depends on the headers in /usr/include,
 so you may have to update those first.
  
 Which probably means you fetch -current sources, rebuild (or
 at least make include), and then rebuild pfstat.

In the meantime I rebuild pfstat, but still the same error message.
The newer header files were installed while upgrading to a newer
snapshot.

 pfstat sources themselves don't need any changes, afaik.
  
 Sucks, eh? Tell the guy who broke pf ioctl API, mcbride@ most
 likely ;)

As I'm not familiar with the pf code, could someone point out what the
changes of the pf ioctl API were?

Regards,
Markus



Re: pfstat gives errors on -current

2009-03-28 Thread Theo de Raadt
 On Thu, Mar 26, 2009 at 01:36:00PM +0100, Daniel Hartmeier wrote:
  On Thu, Mar 26, 2009 at 01:11:49PM +0100, Markus Lude wrote:
  
   Hello,
   after updating to the recent snapshot from march 24th I now get errors
   when running pfstat:
   
   ioctl: DIOCIGETIFACES: Operation not supported by device
   pf_query: query_ifaces() failed
   
   Probably something changed in the pf code.
  
  That just means the pfstat binary doesn't match the newer kernel,
  and needs to be rebuilt.
   
  But the rebuild of pfstat depends on the headers in /usr/include,
  so you may have to update those first.
   
  Which probably means you fetch -current sources, rebuild (or
  at least make include), and then rebuild pfstat.
 
 In the meantime I rebuild pfstat, but still the same error message.
 The newer header files were installed while upgrading to a newer
 snapshot.
 
  pfstat sources themselves don't need any changes, afaik.
   
  Sucks, eh? Tell the guy who broke pf ioctl API, mcbride@ most
  likely ;)
 
 As I'm not familiar with the pf code, could someone point out what the
 changes of the pf ioctl API were?

have you considered using the built-in command

 systat pf 1

and then use the right and left cursors to see additional interesting
views.



Re: pfstat gives errors on -current

2009-03-28 Thread Gerald Chudyk
 have you considered using the built-in command

     systat pf 1


That is one of the coolest utilities I have seen in a long time. I
really must spend more time reading man pages...