Antivirus - PF (Packet Filter): Register

MORE ABOUT

PF(PACKET FILTER)

Register

Registration PF is configured in pf.conf rules. The logs are handled in binary format tcpdump / pcap.

You can access the logs through the network pseudo device called 'pflog' using a utility such as tcpdump. Alternatively the utility 'pflogd' can pick and place logs in binary log file / var / log / pflog, which can also be operated with tcpdump, Ethereal and other similar applications.

The format tcpdump / pcap has been modified slightly to archive statistics firewall rules, states pass / lock, interfaces used, information is only available to utilities that take into account this particular encoding, including recent versions of tcpdump and Ethereal.