Pftop

From wikinotes
Revision as of 17:02, 1 July 2021 by Will (talk | contribs) (→‎Hotkeys)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

tool like top, that monitors traffic through pf firewall.

Documentation

freebsd manpage https://www.freebsd.org/cgi/man.cgi?query=pftop

Hotkeys

1  #
2  #
3  # 
4  # 
5  # packets blocked for each rule

f  # filter (see below)

Filter Syntax

filter syntax is very similar to tcpdump

host 10.0.0.1
host 10.0.0.1 and proto tcp  # multiple rules
!host 10.0.0.1               # invert rule


host 10.0.0.1     # ip
port 22           # port
net  10.0.0.1/24  # all ips on /24 subnet