> > Only one possible bug... > > Counters are not counting: > > [EMAIL PROTECTED]> ipfstat -ih > 0 block in log body quick proto tcp from any to any with short > 0 block in log body quick from any to any with opt lsrr > .. > .. > > (All are zero).
You've chosen a bad pair of rules to be representative of the problem because I doubt many packets are matching your full description. The "with short" and "with opt lsrr" add extra requirements for the packet to match. If you had "block in log all" at the top and that wasn't matching packets, I'd be more concerned. Darren
