On Tue, 2 Oct 2001, CRESTIN Fr=E9d=E9ric wrote:

> I have a new problem with STATE TOP facility for IPFilter 3.4.9, on a Net=
BSD
> 1.5.2/i386: "ipfstat -t" doesn't display anything, i.e. no IP packets. Bu=
t
> IPF is working with "keep state" keywords in the rules.
>
> I was trying to upgrade from IPFilter 3.4.9 to 3.4.20. As all was working
> except STATE TOP facility (compiled but displaying nothing), I tried to c=
ome
> back to IPF 3.4.9.
>
> I made a new Kernel with original sources, new binaries, etc. And as with
>
> So, IPF works perfect, except STATE TOP facility.

Do you get any errors? Does "ipfstat -si -so" show anything? You must
actually trigger one of your "keep state" rules before you will see
anything, of course.

Frederick