On Tue, Jun 4, 2013 at 4:06 PM, Julian Elischer <jul...@freebsd.org> wrote:
> On 6/3/13 11:40 PM, Michael Sierchio wrote: > >> On Mon, Jun 3, 2013 at 4:43 AM, Andreas Nilsson <andrn...@gmail.com> >> wrote: >> >>> Hello, >>> >>> Still trying out the tablearg functionality of ipfw and found the >>> following: >>> >>> 1) >>> # ipfw table 100 add 192.168.0.0/24 10.0.0.1 >>> # ipfw table 100 list >>> 192.168.0.0/24 167772161 >>> >>> I guess it is correct, but not user friendly. Can't the tablearg part be >>> printed as normal dotted decimal? >>> >> No - it's an integer. The semantics of the table arg are up to you, >> but it could be a rule number, used in a computed go to, as in >> > > the only way to get this printed correctly would be for the printing > routines to > keep enough state about the rules using the table to be able to interpret > the tablearg according to how it was used. this would be a task that is way > more complicated than it is worth. > Fair point. Best regards Andreas > >> ipfw add 05000 skipto tablearg ip from any to me in recv em1 lookup >> src-ip 23 >> >> I use it to classify traffic based on country of origin. >> >> Another question: While using tablearg, is there a way to get statistics >>> of >>> each "individual" computed value instead of just the aggregate >>> statistics >>> for all rules "generated" by the tablearg rule? >>> >> you can log where the target rule is executed, or have a count rule. >> >> - M >> ______________________________**_________________ >> freebsd-net@freebsd.org mailing list >> http://lists.freebsd.org/**mailman/listinfo/freebsd-net<http://lists.freebsd.org/mailman/listinfo/freebsd-net> >> To unsubscribe, send any mail to >> "freebsd-net-unsubscribe@**freebsd.org<freebsd-net-unsubscr...@freebsd.org> >> " >> >> >> > _______________________________________________ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"
