On 2013/04/29 22:32, Lawrence Teo wrote: > This diff syncs the PF reason codes on the tcpdump(8) man page with > PFRES_NAMES in net/pfvar.h. > > OK? > > > Index: tcpdump.8 > =================================================================== > RCS file: /cvs/src/usr.sbin/tcpdump/tcpdump.8,v > retrieving revision 1.79 > diff -u -p -r1.79 tcpdump.8 > --- tcpdump.8 26 Sep 2012 16:19:45 -0000 1.79 > +++ tcpdump.8 30 Apr 2013 02:22:01 -0000 > @@ -735,8 +735,9 @@ The known codes are: > .Ar state-insert , > .Ar state-limit , > .Ar src-limit , > +.Ar synproxy , > and > -.Ar synproxy > +.Ar translate > (applies only to packets logged by > .Xr pf 4 ) . > .It Cm rset Ar name > @@ -1066,8 +1067,12 @@ and packet length are printed. > .Pp > On the packet filter logging interface > .Xr pflog 4 , > -logging reason > -.Pq rule match, bad-offset, fragment, bad-timestamp, short, normalize, > memory , > +the logging reason > +.Po > +rule match, bad-offset, fragment, short, normalize, memory, bad-timestamp, > +congestion, ip-option, proto-cksum, state-mismatch, state-insert, > +state-limit, src-limit, synproxy, translate > +.Pc
needs a , after this list, but I'm not convinced there are PFLOG_PACKET() associated with all these reason codes - i.e. I think that it's intentional that this isn't a list of every reason code. > action taken > .Pq pass/block , > direction >
