Hi, On Tue, Aug 01, 2023 at 13:21 -0500, Zane C B-H wrote: > So what is a good way to get all packets passing through that the kernel > currently sees? Apparently any is not support on non-Linux systems and > pflog would require adding log to all rules. Similarly only logs packets > that match a rule.
What I've done in the path is make an if_brige(4) bridge0 interface, put that into monitor mode and joined all the interfaces needed to it. Worked quite well for me. CU, Sec -- There are too many priorities. One has to prioritize priorities. -- Wietse