Hi all,

I have been a happy user of OpenBSD for years. Currently I have some problems I am trying to trace (and hopefully resolve).

In my pf.conf I want to use a rule with a user name. The pf.conf manual page shows two things related to this: When logging add '(user)' after the log and when filtering add user <user name or ID> to the rule.

To test all this I used nc to output some UDP traffic and I added the following rule to my pf.conf:
==> pass out log (user) quick on $ExtIF proto udp
with "tcpdump -eli pflog0" I can see the result of my nc UDP output traffic but no user name is displayed.
I modified the rule into:
==> pass out log (user) quick on $ExtIF proto udp user <my user name>
The rule is not matched anymore. I also tried my user ID instead of name but that did not match either.

Can anybody tell me what I am doing wrong in relation to the rule in pf.conf and maybe the options for tcpdump when trying to display the user name

--

Peter

Reply via email to