Package: kfreebsd-image-9
Version: 9.0-1
Severity: normal
Tags: patch

Dear kbsd kernel maintainers,

In the transition from 8 to 9 kernel series, pflog device was disable on
compile-time configuration. Honestly, I spend just a few minutes looking
around the debian-kbsd list trying to find whether there's a possible
reason to back this difference, but apparently there's not.

So, I've recompiled 9.0-1 version for amd64 arch with pflog device on
and I've been using it some time now, no issues so far. More over, I've
checked and confirmed that the functionality is properly working
(logging traffic on the pflog device, what's intended for).
Patched attached for i386/amd64 (just tested this last arch).

As a side note, current archive's tcpdump version is unable to recognize
the pseudo interface type[1][2], but using openbsd's provided tcpdump
does read kbsd's captured dumps. If this patch is accepted, I'll try to
see how possible it is for debian's tcpdump to adopt pflog
pseudodevice-handling patch.

Since everything appears to be adecuate, I ask you to consider enabling
back pflog device by default on kfreebsd 9 series, please.



Thanks a lot and keep with all this excellent work up!


Cheers,

Dererk



1.# tcpdump -nettti pflog0
tcpdump: WARNING: pflog0: no IPv4 address assigned
tcpdump: packet printing is not supported for link type PFLOG: use -w
2. # tcpdump -nettti pflog0 -w foobar -v
tcpdump: WARNING: pflog0: no IPv4 address assigned
tcpdump: listening on pflog0, link-type PFLOG (OpenBSD pflog file),
capture size 65535 bytes
1 packet captured^C
1 packet received by filter
0 packets dropped by kernel

# tcpdump -nettt -r foobar -v
reading from file foobar, link-type PFLOG (OpenBSD pflog file)
tcpdump: packet printing is not supported for link type PFLOG: use -w


-- 
BOFH excuse #403:
Sysadmin didn't hear pager go off due to loud music from bar-room speakers.

diff -ruN kfreebsd-9-9.0-orig/debian/arch/amd64/amd64.config kfreebsd-9-9.0/debian/arch/amd64/amd64.config
--- kfreebsd-9-9.0-orig/debian/arch/amd64/amd64.config  2012-02-05 02:09:43.000000000 -0300
+++ kfreebsd-9-9.0/debian/arch/amd64/amd64.config   2012-02-04 18:29:06.000000000 -0300
@@ -24,6 +24,7 @@
 # Network options
 device     carp
 device     pf
+device     pflog
 device     pfsync
 
 include         GENERIC
diff -ruN kfreebsd-9-9.0-orig/debian/arch/i386/486.config kfreebsd-9-9.0/debian/arch/i386/486.config
--- kfreebsd-9-9.0-orig/debian/arch/i386/486.config 2012-01-06 10:21:31.000000000 -0300
+++ kfreebsd-9-9.0/debian/arch/i386/486.config  2012-02-05 01:56:47.000000000 -0300
@@ -21,6 +21,7 @@
 # Network options
 device     carp
 device     pf
+device     pflog
 device     pfsync
 
 # Xbox support
diff -ruN kfreebsd-9-9.0-orig/debian/arch/i386/686.config kfreebsd-9-9.0/debian/arch/i386/686.config
--- kfreebsd-9-9.0-orig/debian/arch/i386/686.config 2011-12-18 08:45:52.000000000 -0300
+++ kfreebsd-9-9.0/debian/arch/i386/686.config  2012-02-05 01:56:38.000000000 -0300
@@ -22,6 +22,7 @@
 # Network options
 device     carp
 device     pf
+device     pflog
 device     pfsync
 
 # Xbox support

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to