PF nad bridge

Milan Cizek cizek.milan at seznam.cz
Wed May 6 23:28:31 CEST 2009


Ahoj,

> > 000000 rule 0/0(match): rdr in on rl0: 192.168.1.12.2243 > 
> X.X.X.X.8080:
> > tcp 28 [bad hdr length 0 - too short, < 20]
>                    ^^^^^^^^^^^^^^^^^^^^^^^^^^ neco ti sezralo 
> hlavicku - masina si mysli, ze ma nulovou delku

tenhle problem - nepochopeni jsem vyresil... Staci pridat tcpdumpu treba
-s256.

> This is not a pf problem.  tcpdump's snaplen defaults to 56 bytes, which
is too small when reading from pflog.  Use the -s flag to increase the
snaplen to 256 bytes, for example.

Milan




More information about the Users-l mailing list