On Sat, Oct 03, 2026 at 12:43:56AM +0330, chara wrote: > I have been running a public OpenBSD installation that offers various > services. > the installation has a quota on its upload/download and i'd like to know what > services (ports) have used the quota.
Like Darren already mentioned, this sounds like just putting set state-defaults pflow at the start of your /etc/pf.conf and setting up a pflow(4) device plus a collector is what you want to do. As far as I can recall the relevant man pages are quite readable, but if you enjoy that kind of thing, my 2014 "Yes, You Too Can Be An Evil Network Overlord - On The Cheap With OpenBSD, pflow And nfsen" (https://nxdomain.no/~peter/yes_you_too_can_be_an_evil_network_verlord.html) offers a few pointers as well. All the best, Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://nxdomain.no/~peter/blogposts https://nostarch.com/book-of-pf-4th-edition "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.
