tech-net archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
npflog latency
Hi,
I have the following rules:
kyroz# npfctl show
| # filtering: active
| # config: loaded
|
| procedure "log"
|
| group default { # id="1"
| pass stateful out final all # id="2"
| pass stateful in final family inet4 proto tcp flags S/FSRA to
51.159.70.149 port 22 # id="3"
| pass final on lo0 all # id="4"
| block all apply "log" # id="5"
| }
I test a connection that should be blocked:
| uzqew% nc kyroz.triaxx.org 80
And I expect to see logs of the blocked connections:
| kyroz# tcpdump -i npflog0 port 80
But I have to wait for approximately ~70 seconds to see the following
logs appearing.
Is there any reason for this latency?
Fred
Home |
Main Index |
Thread Index |
Old Index