On Tue, Jun 4, 2013 at 4:06 PM, Julian Elischer <[email protected]> wrote:
> On 6/3/13 11:40 PM, Michael Sierchio wrote: > >> On Mon, Jun 3, 2013 at 4:43 AM, Andreas Nilsson <[email protected]> >> wrote: >> >>> Hello, >>> >>> Still trying out the tablearg functionality of ipfw and found the >>> following: >>> >>> 1) >>> # ipfw table 100 add 192.168.0.0/24 10.0.0.1 >>> # ipfw table 100 list >>> 192.168.0.0/24 167772161 >>> >>> I guess it is correct, but not user friendly. Can't the tablearg part be >>> printed as normal dotted decimal? >>> >> No - it's an integer. The semantics of the table arg are up to you, >> but it could be a rule number, used in a computed go to, as in >> > > the only way to get this printed correctly would be for the printing > routines to > keep enough state about the rules using the table to be able to interpret > the tablearg according to how it was used. this would be a task that is way > more complicated than it is worth. > Fair point. Best regards Andreas > >> ipfw add 05000 skipto tablearg ip from any to me in recv em1 lookup >> src-ip 23 >> >> I use it to classify traffic based on country of origin. >> >> Another question: While using tablearg, is there a way to get statistics >>> of >>> each "individual" computed value instead of just the aggregate >>> statistics >>> for all rules "generated" by the tablearg rule? >>> >> you can log where the target rule is executed, or have a count rule. >> >> - M >> ______________________________**_________________ >> [email protected] mailing list >> http://lists.freebsd.org/**mailman/listinfo/freebsd-net<http://lists.freebsd.org/mailman/listinfo/freebsd-net> >> To unsubscribe, send any mail to >> "freebsd-net-unsubscribe@**freebsd.org<[email protected]> >> " >> >> >> > _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[email protected]"
