Re: Rule last match timestamp

2019-12-27 Thread Kristof Provost
On 27 Dec 2019, at 21:49, Franco Fichtner wrote: Hi, On 27. Dec 2019, at 6:45 PM, Kristof Provost wrote: What are you trying to accomplish? Some people believe that "last match" is a great metric to audit rules for intrusion detection and all sorts ruleset optimisation and refinement. I

Re: Rule last match timestamp

2019-12-27 Thread Franco Fichtner
Hi, > On 27. Dec 2019, at 6:45 PM, Kristof Provost wrote: > > What are you trying to accomplish? Some people believe that "last match" is a great metric to audit rules for intrusion detection and all sorts ruleset optimisation and refinement. In OPNsense the question has popped up a few times

Re: Rule last match timestamp

2019-12-27 Thread Kristof Provost
On 26 Dec 2019, at 1:20, Özkan KIRIK wrote: > Hi, > > I need last match timestamps for each rule. ipfw has an option for this. > But pfctl -v -sr command doesnt show last match timestamp. > Is there way to gather this information in pf? > Pf does not track this. What are you trying to accomplish?

Rule last match timestamp

2019-12-25 Thread Özkan KIRIK
Hi, I need last match timestamps for each rule. ipfw has an option for this. But pfctl -v -sr command doesnt show last match timestamp. Is there way to gather this information in pf? Thanks ___ freebsd-pf@freebsd.org mailing list https://lists.freebsd.o