Flow monitoring with PF

[Ermal Luçi]

>
> Hi,
> I was looking at trying out flow monitoring and I found pfflowd, but
> unfortunately it does not work with FreeBSD >9.0. I thought about
> ng_netflow but that doesn't see my tun interface which may be related to..
> WARNING: attempt to domain_add(netgraph) after domainfinalize()
>
> since tun0 appears after the kernel is all done.
>
> Does anyone have any recommendations for generating flow information from
> PF?
>


Here
https://github.com/pfsense/pfsense-tools/tree/master/pfPorts/pfflowd-0.8
is a port that should work ok with pf(4) in FreeBSD 9.0++


>
> Thanks.
>
> --
> Daniel O'Connor software and network engineer
> for Genesis Software - http://www.gsoft.com.au
> "The nice thing about standards is that there
> are so many of them to choose from."
>   -- Andrew Tanenbaum
> GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C
>
>
>

-- 
Ermal