On Sunday 08 July 2007, Guy Harris wrote:
> Max Laier wrote:
> > the attached makes libpcap and tcpdump use pfvar.h/if_pflog.h from
> > the host system (if available) - which is what most people will
> > want[*].
>
> What most people want, I think, is to be able to capture on the pflog
> interface
Max Laier wrote:
the attached makes libpcap and tcpdump use pfvar.h/if_pflog.h from the
host system (if available) - which is what most people will want[*].
What most people want, I think, is to be able to capture on the pflog
interface and read pflog files, regardless of how that happens; if
