Re: PF log entry

2014-05-29 Thread Stuart Henderson
On 2014-05-29, Stan Gammons wrote: > On 05/28/2014 04:10 PM, Philip Guenther wrote: >> On Tue, May 27, 2014 at 7:12 PM, Stan Gammons > > wrote: >> >> Using tcpdump -n -ttt -r /var/log/pflog I have a log entry with >> [len16> 161. What is len16> >> >> If s

Re: PF log entry

2014-05-28 Thread Stan Gammons
On 05/28/2014 04:10 PM, Philip Guenther wrote: > On Tue, May 27, 2014 at 7:12 PM, Stan Gammons > wrote: > > Using tcpdump -n -ttt -r /var/log/pflog I have a log entry with > [len16 161. What is len16 > > If something in tcpdump output isn't described by t

Re: PF log entry

2014-05-28 Thread Philip Guenther
On Tue, May 27, 2014 at 7:12 PM, Stan Gammons wrote: > Using tcpdump -n -ttt -r /var/log/pflog I have a log entry with > [len16 is len16 If something in tcpdump output isn't described by the manpage, you'll need to check the source and see what the code generating it didn't like. In this case,

PF log entry

2014-05-27 Thread Stan Gammons
Using tcpdump -n -ttt -r /var/log/pflog I have a log entry with [len16What is len16