Pftop

From wikinotes

tool like top, that monitors traffic through pf firewall.

Documentation

freebsd manpage https://www.freebsd.org/cgi/man.cgi?query=pftop

Hotkeys

1  #
2  #
3  # 
4  # 
5  # packets blocked for each rule

f  # filter (see below)

Filter Syntax

filter syntax is very similar to tcpdump

host 10.0.0.1
host 10.0.0.1 and proto tcp  # multiple rules
!host 10.0.0.1               # invert rule


host 10.0.0.1     # ip
port 22           # port
net  10.0.0.1/24  # all ips on /24 subnet