Unexpected pf behavior

[Doug Hardie]

On 10 May 2014, at 20:33, Adam McDougall <mcdouga9 at egr.msu.edu> wrote:

> On Sat, May 10, 2014 at 02:34:18PM -0700, Doug Hardie wrote:
> 
>  10 succeeding connections that were passed through to the port.
>  These were logged by the process listening on that port.
> 
> Are you certain those log events were from 2014?  Some logs may not
> get rotated yearly and summary scripts can report misleading results.
> This is something that has surprised me in the past so I made sure
> all my logs rotate daily instead of by size alone.
> 

Yes, all logs are rotated daily.  Brandon Vincent <Brandon.Vincent at asu.edu> found the issue.  There was another port open to that service that did not have a pf rule.  It does now.