Re: What's wrong with ipmon?

[Manuel Bouyer <bouyer%antioche.eu.org@localhost>]

On Mon, May 14, 2012 at 12:05:20AM +0200, herbert langhans wrote:
> Hi Listers,
> I am fighting for hours with ipmon.
> 
> After I had set up the ipfilter with a quite extensive /etc/ipf.conf I
> wanted to have the results in a logfile. Whatever I do - ipmon doesnt
> generate any output.
> 
> Since I wasnt sure about logging the output over syslog (to avoid
> possible configuration errors in syslog.conf) I tried the direct way
> by invoking:
> #ipmon -Dnf /home/herbs/ipf.log
> 
> Nothing there. The ipfilter is working (ipfstat shows that) and an empty
> ipf.log exists too. Something is wrong. I also tried to set it in 
> /etc/rc.d to ipmon=YES - no log data ...
> 
> What am I doing wrong?

check that your kernel has
options IPFILTER_LOG
(it's on by default in i386 and amd64 GENERIC, I didn't check others)

-- 
Manuel Bouyer <bouyer%antioche.eu.org@localhost>
     NetBSD: 26 ans d'experience feront toujours la difference
--