Skip navigation

Log in to create and rate content, and to follow, bookmark, and share content with other members.

AnsweredAssumed Answered

Parser for service Packet Filter on openBSD

Question asked by Ange Olivier Ambemou on Dec 20, 2017
Latest reply on Dec 22, 2017 by Ange Olivier Ambemou

Like • Show 0 Likes0
Comment • 2

Hello all,

The log from service packet filter it's like this :

Dec 18 01:20:01 block in on em2: 10.19.1.2.27341 > 192.168.1.15.23

the last octet it's a port and when i use nw parser tool there are some issue to parse the IP and port

10.19.1.2.27341 only bold it's take to ipaddress.

No one else has this question

Outcomes

2 Replies

Sravan Koneti Dec 22, 2017 1:02 AM
Mark Correct
Correct Answer
Hi Olivier,

I believe the Rule syntax can be changed from 10.19.1.2.27341 to 10.19.1.2 27341 (Space between IP and Port)
Need delimiter (Not .) between IP and Port.
```
pf.conf(5) 
Syntax:
action [direction] [on interface]: [from src_addr [port src_port]] [to dst_addr [port dst_port]]
```
Like • Show 0 Likes0
Actions
- Ange Olivier Ambemou @ Sravan Koneti on Dec 22, 2017 6:31 AM
  Mark Correct
  Correct Answer
  Sravan,
  
  Ok in check it.
  
  Ange.
  Like • Show 0 Likes0
  Actions

Recommended Content