pfstat - Print packet filter status information
/usr/bin/pfstat [options]
If no options are given, all are assumed (except for the
verbose option, -v). Counts. Displays various counts
(per ethernet unit) including number of packets sent and
received, the number of packets dropped due to full input
queues, the number of packets not wanted by any filter,
and the number of packets missed by the interface.
Descriptors. Displays OpenDescriptors for each minor
device. Filters. Displays packet filters for each minor
device. Parameters. Displays device parameters including
device type, header and address lengths, maximum transmission
units (MTU), and interface and broadcast addresses.
QueueElements. Displays the QueueElements. Scavenger.
Displays the FreeQueue and Scavenger statistics. Verbose.
Displays information for minor devices not actually in use
and complete queue information, only if this option is
given. Limits output to information about specified
units. If no digits are given, all units are displayed.
Valid digits are 0 to 7.
The pfstat command interprets the data structures of the
packet filter driver packetfilter(7). The data structures
are contained in /dev/kmem.
By default, some of the output might not be easily read on
an 80-character line. You might want to use some of the
options to obtain a less verbose but more readable listing.
Because of the dynamic nature of a running system, pfstat
might not provide a consistent view of the system. You
should use this command for analyzing static or slowlyvarying
problems, not transient ones.
This section describes the information displayed in the
output of the pfstat command under the headings AllDescriptors,
Filters, and QueueElts.
AllDescriptors [Toc] [Back]
Minor device number for open descriptor. Descriptor location.
Forward link to other descriptors. Blank, or one
of the following: Waiting for input, indefinite wait Waiting
for input, timed wait Has timed out Addresses of
``Queue Elements'' for waiting packets. Number of packets
queued for input/maximum for this queue. Timeout duration
in clock ticks (if the -v [Verbose] option is not given,
the times may be expressed as minutes [with a trailing
``m''], hours [with a trailing ``h''], or simply ``long'',
to keep the columns lined up.) Shows which mode bits are
set for the minor device; each bit is encoded as a single
character: ENHOLDSIG ENBATCH ENTSTAMP ENPROMISC ENNONEXCL
ENCOPYALL ENBPFHDR An unknown mode bit is set. Signal
number to be delivered when a packet arrives. Process to
be signaled when a packet arrives. Process id which
enabled the signal.
Filters [Toc] [Back]
Minor device number of filter. Count of packets accepted
by this filter. Count of ``recent'' drops for this filter.
Priority of filter. (Not applicable to BPF-style
filters.) Length of filter (in shortwords). See packetfilter(7) for interpretation of packet filters. See
bpf(7) for interpretation of BPF-style filters.
QueueElts [Toc] [Back]
Location of queue element. Forward and backward links.
Packet size. Reference count for queue element. Perpacket
flag bits set; each bit is encoded as a single
character: ENSF_PROMISC ENSF_BROADCAST ENSF_MULTICAST
ENSF_TRAILER An unknown flag bit is set. Count of packets
dropped between the time previous packet was queued and
the time this packet was queued. Approximate time this
packet was received.
Default source of tables
Commands: netstat(1), pfconfig(8)
Files: bpf(7), packetfilter(7)
pfstat(1)
[ Back ] |
