Are you sure these are the matching records? I see differences. On 12/26/05, David Strout <[EMAIL PROTECTED]> wrote: > Here is the enhanced log: > > Dec 26 13:37:39 WAN 24.39.130.241.3129 > 24.39.185.78.445 ESP > Dec 26 13:37:36 WAN 24.39.130.241.3129 > 24.39.185.78.445 ESP > Dec 26 13:35:38 WAN 66.101.95.241:16246 > 24.39.185.78:1026 UDP > > And here is the raw log: > > Dec 26 13:37:39 pf: 2. 955773 rule 35/0(match): > block in on fxp1: 24.39.130.241.3129 > > 24.39.185.78.445: S 452106698:452106698(0) win > 16384 <mss 1460,nop,nop,sackOK> > Dec 26 13:37:36 pf: 118. 730692 rule 35/0(match): > block in on fxp1: 24.39.130.241.3129 > > 24.39.185.78.445: S 452106698:452106698(0) win > 16384 <mss 1460,nop,nop,sackOK> > Dec 26 13:35:38 pf: 53. 763178 rule 35/0(match): > block in on fxp1: 66.101.95.241.16246 > > 24.39.185.78.1026: UDP, length 791 > > -- > David L. Strout > Engineering Systems Plus, LLC > > ----- Original Message ----- > Subject: Re: [pfSense Support] BETA1 error > reporting protocal in firewall logs > From: [EMAIL PROTECTED] > To: [email protected] > Date: 12-26-2005 1:37 pm > > > > Turn on raw logs and compare. Please show me a > line where it is matching false. > > > > My logs here only show TCP and UDP and some > ICMP. > > > > On 12/26/05, David Strout <[EMAIL PROTECTED]> > wrote: > > > I have notices since installing BETA1 that the > > > firewall logs report "NEARLY" everything as > ESP > > > protocol. I have hit the outside of pfS with > many > > > packets and nmap'd the outside interface and > all > > > reports as ESP protocol. > > > > > > Thoughts? > > > > > > -- > > > David L. Strout > > > Engineering Systems Plus, LLC > > > > > > > > > > > > > > > > --------------------------------------------------------------------- > > > To unsubscribe, e-mail: > [EMAIL PROTECTED] > > > For additional commands, e-mail: > [EMAIL PROTECTED] > > > > > > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: > [EMAIL PROTECTED] > > For additional commands, e-mail: > [EMAIL PROTECTED] > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > >
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
