Re: CVS commit: src/sys/net/npf

[Emmanuel Nyarko <emmankoko519%gmail.com@localhost>]

> On 8 Jul 2025, at 4:25 PM, Greg Troxel <gdt%lexort.com@localhost> wrote:
> 
> Emmanuel Nyarko <emmankoko519%gmail.com@localhost> writes:
> 
>>> I'm not
>>>   saying they have to be there, but there should be some amount of
>>>   counters for the various things that can happen, accessible somehow.
>>>   This became obvious when I ran into the 'all traffic blocked' bug
>>>   and I could not find a counter for blocked output packets.
>> 
>> npfctl stats???
>> 
>> i used npfctl stats and i saw the default blocks which helped me to solve the issue.
> 
> Sorry, I missed that.  I scanned the output from npfctl on the left and
> didn't realize the first line had 5 separate verbs.  I'm going to say
> that's my fault and it's ok.
> 
> It would probably be good to improve granularity, perhaps

> in/out

i think i agree with this. Having for in and out as well.
 
> to
> start with, and "ether" probably should be layer-2 to be consistent.
> 

Emmanuel