On 2023-11-11, Peter N. M. Hansteen <pe...@bsdly.net> wrote: > On Fri, Nov 10, 2023 at 08:23:54PM +0100, Hrvoje Popovski wrote: >> what would be best way to log pf logs in ascii and sent it to remote >> syslog ? I'm aware of pflow but I need ascii pf logs on remote syslog >> server. > > something like the good old > https://home.nuug.no/~peter/pf/newest/log2syslog.html > should still work, I think.
Or https://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/www/faq/pf/logging.html?rev=1.68#syslog If you don't need _all_ pf logs converting to syslog, you can create a separate interface "echo up | doas tee /etc/hostname.pflog1" and use "log to pflog1" on selected rules.
