diff options
| author |   sthen <sthen@openbsd.org> | 2013-03-13 20:57:47 +0000 |
|---|---|---|
| committer | sthen <sthen@openbsd.org> | 2013-03-13 20:57:47 +0000 |
| commit | 83e508aa68e14371424007a1d7ea8c876d1bc932 (patch) | |
| tree | 3eee4d7fa7881309f7feabc97de4c93ac19afbce | |
| parent | Make sure dhclient doesn't delete IPv6 routes. (diff) | |
| download | wireguard-openbsd-83e508aa68e14371424007a1d7ea8c876d1bc932.tar.xz wireguard-openbsd-83e508aa68e14371424007a1d7ea8c876d1bc932.zip | |
Describe the counters that "pfctl -s info" displays. Tweaks jmc@, ok deraadt@
| -rw-r--r-- | sbin/pfctl/pfctl.8 | 45 |
1 files changed, 42 insertions, 3 deletions
diff --git a/sbin/pfctl/pfctl.8 b/sbin/pfctl/pfctl.8 index 31656933197..44a6764d763 100644 --- a/sbin/pfctl/pfctl.8 +++ b/sbin/pfctl/pfctl.8 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pfctl.8,v 1.156 2012/09/29 01:41:01 lteo Exp $ +.\" $OpenBSD: pfctl.8,v 1.157 2013/03/13 20:57:47 sthen Exp $ .\" .\" Copyright (c) 2001 Kjell Wooding. All rights reserved. .\" @@ -24,7 +24,7 @@ .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: September 29 2012 $ +.Dd $Mdocdate: March 13 2013 $ .Dt PFCTL 8 .Os .Sh NAME @@ -345,7 +345,7 @@ Show the filter parameters specified by .Ar modifier (may be abbreviated): .Pp -.Bl -tag -width xxxxxxxxxxxxx -compact +.Bl -tag -width xxxxxxxxxxxxxx -compact .It Fl s Cm queue Show the currently loaded queue rules. When used together with @@ -423,6 +423,45 @@ can be used to select an interface or a group of interfaces. Show all of the above, except for the lists of interfaces and operating system fingerprints. .El +.Pp +Counters shown with +.Fl s Cm info +are: +.Pp +.Bl -tag -width xxxxxxxxxxxxxx -compact +.It match +explicit rule match +.It bad-offset +currently unused +.It fragment +invalid fragments dropped +.It short +short packets dropped +.It normalize +dropped by normalizer: illegal packets +.It memory +memory could not be allocated +.It bad-timestamp +bad TCP timestamp; RFC 1323 +.It congestion +network interface queue congested +.It ip-option +bad IP/IPv6 options +.It proto-cksum +invalid protocol checksum +.It state-mismatch +packet was associated with a state entry, but sequence numbers did not match +.It state-insert +state insertion failure +.It state-limit +configured state limit was reached +.It src-limit +source node/connection limit +.It synproxy +dropped by synproxy +.It translate +no free ports in translation port range +.El .It Fl T Ar command Op Ar address ... Specify the .Ar command |