Re: Live Bandwidth Stats

2003-10-31 Thread ben
On Fri, Oct 31, 2003 at 12:02:32PM -0700, Colin Harford wrote: > What I am after, is a nice simple command that tells the amount of > bandwidth being used, and packets going through at that time, say, > updated say every second. It doesn't include packets per second, but I use ifstat to get a qu

Re: Live Bandwidth Stats

2003-10-31 Thread Colin Harford
Not so sure about that being so useful in this case. I have 512 IP# on a 100 megabit pipe, with a fairly large detailed rule set, this doesn't seem very optimal... Cheers, CH On Oct 31, 2003, at 12:37 PM, jared r r spiegel wrote: On Fri, Oct 31, 2003 at 12:02:32PM -0700, Colin Harford wrote: S

reduced to dialup, things i have figured out so far

2003-10-31 Thread TwiG
thanks to jwit i know i should replace sis0 with tun0, have done that and i see that if i comment out the first aintspoof rule i can again ssh to the server from the int_lan tho i dont understand why. uncomment it and notta any enlightenment? ext_if="sis0" # replace with actual external

Re: Live Bandwidth Stats

2003-10-31 Thread jared r r spiegel
On Fri, Oct 31, 2003 at 12:02:32PM -0700, Colin Harford wrote: > So, before I get flamed, yes, I do know of pfstat, ipaudit, etc. What > I am after is something from the cli. > Sort of like pfctl -s info, or when using altq: pfctl -vvsq. > Does anyone know of a good way to do this, without going

Re: Live Bandwidth Stats

2003-10-31 Thread Max Laier
Hello Colin, Friday, October 31, 2003, 8:02:32 PM, you wrote: CH> I am after is something from the cli. CH> What I am after, is a nice simple command that tells the amount of CH> bandwidth being used, and packets going through at that time, say, CH> updated say every second. CH> Sort of like pfc

Live Bandwidth Stats

2003-10-31 Thread Colin Harford
So, before I get flamed, yes, I do know of pfstat, ipaudit, etc. What I am after is something from the cli. What I am after, is a nice simple command that tells the amount of bandwidth being used, and packets going through at that time, say, updated say every second. Sort of like pfctl -s inf

reduced to dialup...

2003-10-31 Thread TwiG
ok, i have been reduced to dialup again, and thought that i could just replace ext_if="sis0" with ppp0 and with a few minor changes be backup and running, however i am finding out this is not the case! 1, when i just replace sis0 with ppp0 a couple things happen, once i reload pf.conf it claims

Re: pf and alias ip

2003-10-31 Thread Ariel VIVES
On Fri, 2003-10-31 at 14:01, Justin Krejci wrote: > You should give us your entire pf.conf file since obviously you only are > showing a partial. You should give us a description of your network. Where > are you trying to connect from? Is the second IP address routed to your > openbsd box corre

pf and alias ip

2003-10-31 Thread Ariel VIVES
Hi the list, sorry for my english, i'm french. I've got an alias ip for fxp0 : x.x.x.72 x.x.x.73 before i add the alias, everuthing works well. my pf.conf is : firstIP="x.x.x.72" secondIP="x.x.x.73" # for ssh pass in quick on fxp0 proto tcp from $My_IP to $firstIP port 22 keep state but whe

Re: state limits

2003-10-31 Thread Philipp Buehler
On 31/10/2003, Octavian Hornoiu <[EMAIL PROTECTED]> wrote To [EMAIL PROTECTED]: > Is there a feature currently in pf that allows one to limit how many > states one IP or group or macro or interface can use up? For example, i > want my clients that i am natting out to be limited to 1000 states per

Re: state limits

2003-10-31 Thread Cedric Berger
Octavian Hornoiu wrote: Is there a feature currently in pf that allows one to limit how many states one IP or group or macro or interface can use up? For example, i want my clients that i am natting out to be limited to 1000 states per machine so if they get a virus they won't be able to fill up