An updete ... It seems that TCP packets (looks like UDP and ICMP are exempt from this issue and report correctly) are getting reported as ESP proto. I enable the RAW logging and see the logger stream as I'd expect to. I have even tried to augment the /etc/inc/filter.inc file w/ adding a -vv switch to the tcpdump statement to no avail.
Just though I'd report my findings. Going to do a full reinstall in an hour or so and will report after that. -- David L. Strout Engineering Systems Plus, LLC ----- Original Message ----- Subject: Re: [pfSense Support] pfSense Firewall Logs: no ports listed !? From: [EMAIL PROTECTED] To: support@pfsense.com Date: 06-30-2007 7:16 am > >> > >> Problem is now solved in recent snapshots. > >> > > > >Indeed it is, thanks for all the great work. > > > > I have noticed that all of the entries show as > proto ESP. I seem to remember that some time ago > this same situation crept in after a > logging/logging ports issue a while ago. I seem > to remember that there was a fix in that there > needed to be a -v switch added to the tcpdump > command ... not sure really though. > > BTW, I did an upgrade to a 6-28 "built on 6-29 at > 13:10 SNAP. This wasn't a clean install from ISO. > > -- > David L. Strout > Engineering Systems Plus, LLC > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
