11:45:31
|
#vim frw.conf
0a1,2 > block in all > block in all |
| /l3/users/10-09-2007/nt-bsdnet/fbsd3.unix.nt/root :1 :2 :3 :4 :5 :6 :7 :8 :9 :10 :11 :12 :13 :14 :15 :16 :17 :18 :19 :20 :21 :22 :23 :24 :25 :26 :27 :28 :29 :30 :31 :32 :33 :34 :35 :36 |
|
|
#vim frw.conf
0a1,2 > block in all > block in all |
|
#ll
total 62 -rw------- 1 root wheel 0 Sep 11 09:21 .ICEauthority -rw-r--r-- 1 root wheel 400 Sep 11 16:26 .authorized_keys -rw------- 1 root wheel 9522 Sep 12 11:35 .bash_history -rw-r--r-- 1 root wheel 37 Sep 12 11:19 .bash_profile -rw-r--r-- 1 root wheel 38 Sep 7 22:57 .bashrc -rw-r--r-- 2 root wheel 801 Jan 12 2007 .cshrc drwxr-xr-x 2 root wheel 512 Sep 7 15:18 .gstreamer-0.8 -rw------- 1 root wheel 219 Sep 7 16:39 .history -rw-r--r-- 1 root wheel 0 Sep 11 16:27 .hushlogin ... drwx------ 3 root wheel 512 Sep 11 09:19 .local -rw-r--r-- 1 root wheel 293 Jan 12 2007 .login drwxr-xr-x 3 root wheel 512 Sep 11 09:19 .mcop -rw-r--r-- 2 root wheel 251 Jan 12 2007 .profile drwxr-xr-x 2 root wheel 512 Sep 11 09:18 .qt drwx------ 2 root wheel 512 Sep 12 10:34 .ssh drwx------ 2 root wheel 512 Sep 11 09:19 Desktop -rw-r--r-- 1 root wheel 0 Sep 12 11:45 frw -rw-r--r-- 1 root wheel 26 Sep 12 11:46 frw.conf -rw-r--r-- 1 root wheel 4329 Sep 7 22:56 install |
|
#ll
total 62 -rw------- 1 root wheel 0 Sep 11 09:21 .ICEauthority -rw-r--r-- 1 root wheel 400 Sep 11 16:26 .authorized_keys -rw------- 1 root wheel 9522 Sep 12 11:35 .bash_history -rw-r--r-- 1 root wheel 37 Sep 12 11:19 .bash_profile -rw-r--r-- 1 root wheel 38 Sep 7 22:57 .bashrc -rw-r--r-- 2 root wheel 801 Jan 12 2007 .cshrc drwxr-xr-x 2 root wheel 512 Sep 7 15:18 .gstreamer-0.8 -rw------- 1 root wheel 219 Sep 7 16:39 .history -rw-r--r-- 1 root wheel 0 Sep 11 16:27 .hushlogin ... drwx------ 3 root wheel 512 Sep 11 09:19 .local -rw-r--r-- 1 root wheel 293 Jan 12 2007 .login drwxr-xr-x 3 root wheel 512 Sep 11 09:19 .mcop -rw-r--r-- 2 root wheel 251 Jan 12 2007 .profile drwxr-xr-x 2 root wheel 512 Sep 11 09:18 .qt drwx------ 2 root wheel 512 Sep 12 10:34 .ssh drwx------ 2 root wheel 512 Sep 11 09:19 Desktop -rw-r--r-- 1 root wheel 0 Sep 12 11:45 frw -rw-r--r-- 1 root wheel 26 Sep 12 11:46 frw.conf -rw-r--r-- 1 root wheel 4329 Sep 7 22:56 install |
|
#ll
total 62 -rw------- 1 root wheel 0 Sep 11 09:21 .ICEauthority -rw-r--r-- 1 root wheel 400 Sep 11 16:26 .authorized_keys -rw------- 1 root wheel 9522 Sep 12 11:35 .bash_history -rw-r--r-- 1 root wheel 37 Sep 12 11:19 .bash_profile -rw-r--r-- 1 root wheel 38 Sep 7 22:57 .bashrc -rw-r--r-- 2 root wheel 801 Jan 12 2007 .cshrc drwxr-xr-x 2 root wheel 512 Sep 7 15:18 .gstreamer-0.8 -rw------- 1 root wheel 219 Sep 7 16:39 .history -rw-r--r-- 1 root wheel 0 Sep 11 16:27 .hushlogin ... drwx------ 3 root wheel 512 Sep 11 09:19 .local -rw-r--r-- 1 root wheel 293 Jan 12 2007 .login drwxr-xr-x 3 root wheel 512 Sep 11 09:19 .mcop -rw-r--r-- 2 root wheel 251 Jan 12 2007 .profile drwxr-xr-x 2 root wheel 512 Sep 11 09:18 .qt drwx------ 2 root wheel 512 Sep 12 10:34 .ssh drwx------ 2 root wheel 512 Sep 11 09:19 Desktop -rw-r--r-- 1 root wheel 0 Sep 12 11:45 frw -rw-r--r-- 1 root wheel 26 Sep 12 11:46 frw.conf -rw-r--r-- 1 root wheel 4329 Sep 7 22:56 install |
|
#rm -f frw
|
|
#rm -f frw
|
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
|
#ping 192.168.15.242
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on em0, link-type EN10MB (Ethernet), capture size 96 bytes 11:47:32.129530 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 0, length 64 11:47:33.129978 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 1, length 64 11:47:34.130257 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 2, length 64 11:47:35.131228 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 3, length 64 11:47:36.132663 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 4, length 64 11:47:37.133189 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 5, length 64 11:47:38.134170 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 6, length 64 11:47:39.135151 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 7, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes ^C --- 192.168.15.242 ping statistics --- 8 packets transmitted, 0 packets received, 100% packet loss |
|
#tcpdump -i em0 -n -p icmp
11:58:03.248079 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 15, length 64 11:58:03.486818 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 21, length 64 11:58:03.486903 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 21, length 64 11:58:04.248723 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 16, length 64 11:58:04.249089 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 16, length 64 11:58:04.523782 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 22, length 64 11:58:04.523870 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 22, length 64 11:58:05.249689 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 17, length 64 11:58:05.250062 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 17, length 64 11:58:05.524778 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 23, length 64 ... 12:00:18.330927 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 58, length 64 12:00:19.267070 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 60, length 64 12:00:19.331923 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 59, length 64 12:00:20.268046 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 61, length 64 12:00:20.332921 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 60, length 64 12:00:21.269029 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 62, length 64 12:00:21.333909 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 61, length 64 12:00:22.269958 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 63, length 64 12:00:22.334889 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 62, length 64 12:00:23.270985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 64, length 64 |
|
#ping 192.168.15.242
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on em0, link-type EN10MB (Ethernet), capture size 96 bytes 11:47:32.129530 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 0, length 64 11:47:33.129978 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 1, length 64 11:47:34.130257 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 2, length 64 11:47:35.131228 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 3, length 64 11:47:36.132663 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 4, length 64 11:47:37.133189 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 5, length 64 11:47:38.134170 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 6, length 64 11:47:39.135151 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 7, length 64 ... 11:48:37.035998 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 42, length 64 11:48:38.036985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 43, length 64 11:48:39.040977 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 44, length 64 11:48:40.041936 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 45, length 64 11:48:41.042922 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 46, length 64 11:48:42.043898 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 47, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes ^C --- 192.168.15.242 ping statistics --- 48 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.242
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on em0, link-type EN10MB (Ethernet), capture size 96 bytes 11:47:32.129530 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 0, length 64 11:47:33.129978 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 1, length 64 11:47:34.130257 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 2, length 64 11:47:35.131228 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 3, length 64 11:47:36.132663 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 4, length 64 11:47:37.133189 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 5, length 64 11:47:38.134170 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 6, length 64 11:47:39.135151 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 7, length 64 ... 11:48:37.035998 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 42, length 64 11:48:38.036985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 43, length 64 11:48:39.040977 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 44, length 64 11:48:40.041936 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 45, length 64 11:48:41.042922 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 46, length 64 11:48:42.043898 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 47, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes ^C --- 192.168.15.242 ping statistics --- 48 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.242
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on em0, link-type EN10MB (Ethernet), capture size 96 bytes 11:47:32.129530 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 0, length 64 11:47:33.129978 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 1, length 64 11:47:34.130257 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 2, length 64 11:47:35.131228 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 3, length 64 11:47:36.132663 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 4, length 64 11:47:37.133189 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 5, length 64 11:47:38.134170 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 6, length 64 11:47:39.135151 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 7, length 64 ... 11:48:37.035998 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 42, length 64 11:48:38.036985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 43, length 64 11:48:39.040977 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 44, length 64 11:48:40.041936 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 45, length 64 11:48:41.042922 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 46, length 64 11:48:42.043898 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 47, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes ^C --- 192.168.15.242 ping statistics --- 48 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.242
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on em0, link-type EN10MB (Ethernet), capture size 96 bytes 11:47:32.129530 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 0, length 64 11:47:33.129978 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 1, length 64 11:47:34.130257 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 2, length 64 11:47:35.131228 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 3, length 64 11:47:36.132663 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 4, length 64 11:47:37.133189 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 5, length 64 11:47:38.134170 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 6, length 64 11:47:39.135151 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 7, length 64 ... 11:48:37.035998 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 42, length 64 11:48:38.036985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 43, length 64 11:48:39.040977 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 44, length 64 11:48:40.041936 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 45, length 64 11:48:41.042922 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 46, length 64 11:48:42.043898 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 47, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes ^C --- 192.168.15.242 ping statistics --- 48 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.242
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on em0, link-type EN10MB (Ethernet), capture size 96 bytes 11:47:32.129530 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 0, length 64 11:47:33.129978 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 1, length 64 11:47:34.130257 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 2, length 64 11:47:35.131228 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 3, length 64 11:47:36.132663 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 4, length 64 11:47:37.133189 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 5, length 64 11:47:38.134170 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 6, length 64 11:47:39.135151 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 7, length 64 ... 11:48:37.035998 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 42, length 64 11:48:38.036985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 43, length 64 11:48:39.040977 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 44, length 64 11:48:40.041936 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 45, length 64 11:48:41.042922 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 46, length 64 11:48:42.043898 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 47, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes ^C --- 192.168.15.242 ping statistics --- 48 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.242
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on em0, link-type EN10MB (Ethernet), capture size 96 bytes 11:47:32.129530 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 0, length 64 11:47:33.129978 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 1, length 64 11:47:34.130257 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 2, length 64 11:47:35.131228 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 3, length 64 11:47:36.132663 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 4, length 64 11:47:37.133189 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 5, length 64 11:47:38.134170 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 6, length 64 11:47:39.135151 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 7, length 64 ... 11:48:37.035998 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 42, length 64 11:48:38.036985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 43, length 64 11:48:39.040977 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 44, length 64 11:48:40.041936 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 45, length 64 11:48:41.042922 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 46, length 64 11:48:42.043898 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 47, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes ^C --- 192.168.15.242 ping statistics --- 48 packets transmitted, 0 packets received, 100% packet loss |
|
#vim frw.conf
2c2,3 < block in all --- > block out all > pass in on em0 proto icmp from 192.168.15.0/24 |
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
|
#ping 192.168.15.242
PING 192.168.15.242 (192.168.15.242): 56 data bytes ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ^C --- 192.168.15.242 ping statistics --- 14 packets transmitted, 0 packets received, 100% packet loss |
|
#vim frw.conf
3c3 < pass in on em0 proto icmp from 192.168.15.0/24 --- > pass in on em0 proto icmp from 192.168.15.0/24 keep state |
|
#ping 192.168.15.242
PING 192.168.15.242 (192.168.15.242): 56 data bytes ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ^[ping: sendto: Operation not permitted ^C --- 192.168.15.242 ping statistics --- 4 packets transmitted, 0 packets received, 100% packet loss |
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
|
#ping 192.168.15.242
PING 192.168.15.242 (192.168.15.242): 56 data bytes ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ^C --- 192.168.15.242 ping statistics --- 13 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.242
PING 192.168.15.242 (192.168.15.242): 56 data bytes ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ^C --- 192.168.15.242 ping statistics --- 13 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.242
PING 192.168.15.242 (192.168.15.242): 56 data bytes ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ^C --- 192.168.15.242 ping statistics --- 13 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.242
PING 192.168.15.242 (192.168.15.242): 56 data bytes ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ^C --- 192.168.15.242 ping statistics --- 13 packets transmitted, 0 packets received, 100% packet loss |
|
#vim frw.conf
|
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
|
#pfctl -sa
No ALTQ support in kernel ALTQ related functions disabled FILTER RULES: block drop in all block drop out all pass in on em0 inet proto icmp from 192.168.15.0/24 to any keep state INFO: Status: Enabled for 0 days 00:22:19 Debug: Urgent Hostid: 0xb7e336aa State Table Total Rate ... interval 10s adaptive.start 0 states adaptive.end 0 states src.track 0s LIMITS: states hard limit 10000 src-nodes hard limit 10000 frags hard limit 5000 OS FINGERPRINTS: 348 fingerprints loaded |
|
#pfctl -sr
No ALTQ support in kernel ALTQ related functions disabled block drop in all block drop out all pass in on em0 inet proto icmp from 192.168.15.0/24 to any keep state |
|
#vim frw.conf
3c3 < pass in on em0 proto icmp from 192.168.15.0/24 keep state --- > pass out on em0 proto icmp from 192.168.15.0/24 keep state |
|
#vim frw.conf
3c3 < pass in on em0 proto icmp from 192.168.15.0/24 keep state --- > pass out on em0 proto icmp from 192.168.15.0/24 keep state |
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
|
#ping 192.168.15.242
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on em0, link-type EN10MB (Ethernet), capture size 96 bytes 11:47:32.129530 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 0, length 64 11:47:33.129978 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 1, length 64 11:47:34.130257 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 2, length 64 11:47:35.131228 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 3, length 64 11:47:36.132663 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 4, length 64 11:47:37.133189 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 5, length 64 11:47:38.134170 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 6, length 64 11:47:39.135151 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 7, length 64 ... 64 bytes from 192.168.15.242: icmp_seq=17 ttl=64 time=0.501 ms 64 bytes from 192.168.15.242: icmp_seq=18 ttl=64 time=0.426 ms 64 bytes from 192.168.15.242: icmp_seq=19 ttl=64 time=0.443 ms 64 bytes from 192.168.15.242: icmp_seq=20 ttl=64 time=0.454 ms 64 bytes from 192.168.15.242: icmp_seq=21 ttl=64 time=0.466 ms 64 bytes from 192.168.15.242: icmp_seq=22 ttl=64 time=0.475 ms ^C --- 192.168.15.242 ping statistics --- 23 packets transmitted, 23 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.306/0.404/0.505/0.060 ms |
|
#ping 192.168.15.242
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on em0, link-type EN10MB (Ethernet), capture size 96 bytes 11:47:32.129530 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 0, length 64 11:47:33.129978 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 1, length 64 11:47:34.130257 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 2, length 64 11:47:35.131228 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 3, length 64 11:47:36.132663 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 4, length 64 11:47:37.133189 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 5, length 64 11:47:38.134170 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 6, length 64 11:47:39.135151 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 7, length 64 ... 64 bytes from 192.168.15.242: icmp_seq=17 ttl=64 time=0.501 ms 64 bytes from 192.168.15.242: icmp_seq=18 ttl=64 time=0.426 ms 64 bytes from 192.168.15.242: icmp_seq=19 ttl=64 time=0.443 ms 64 bytes from 192.168.15.242: icmp_seq=20 ttl=64 time=0.454 ms 64 bytes from 192.168.15.242: icmp_seq=21 ttl=64 time=0.466 ms 64 bytes from 192.168.15.242: icmp_seq=22 ttl=64 time=0.475 ms ^C --- 192.168.15.242 ping statistics --- 23 packets transmitted, 23 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.306/0.404/0.505/0.060 ms |
|
#ping 192.168.15.242
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on em0, link-type EN10MB (Ethernet), capture size 96 bytes 11:47:32.129530 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 0, length 64 11:47:33.129978 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 1, length 64 11:47:34.130257 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 2, length 64 11:47:35.131228 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 3, length 64 11:47:36.132663 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 4, length 64 11:47:37.133189 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 5, length 64 11:47:38.134170 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 6, length 64 11:47:39.135151 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 7, length 64 ... 64 bytes from 192.168.15.242: icmp_seq=17 ttl=64 time=0.501 ms 64 bytes from 192.168.15.242: icmp_seq=18 ttl=64 time=0.426 ms 64 bytes from 192.168.15.242: icmp_seq=19 ttl=64 time=0.443 ms 64 bytes from 192.168.15.242: icmp_seq=20 ttl=64 time=0.454 ms 64 bytes from 192.168.15.242: icmp_seq=21 ttl=64 time=0.466 ms 64 bytes from 192.168.15.242: icmp_seq=22 ttl=64 time=0.475 ms ^C --- 192.168.15.242 ping statistics --- 23 packets transmitted, 23 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.306/0.404/0.505/0.060 ms |
|
#ping 192.168.15.242
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on em0, link-type EN10MB (Ethernet), capture size 96 bytes 11:47:32.129530 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 0, length 64 11:47:33.129978 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 1, length 64 11:47:34.130257 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 2, length 64 11:47:35.131228 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 3, length 64 11:47:36.132663 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 4, length 64 11:47:37.133189 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 5, length 64 11:47:38.134170 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 6, length 64 11:47:39.135151 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 7, length 64 ... 64 bytes from 192.168.15.242: icmp_seq=17 ttl=64 time=0.501 ms 64 bytes from 192.168.15.242: icmp_seq=18 ttl=64 time=0.426 ms 64 bytes from 192.168.15.242: icmp_seq=19 ttl=64 time=0.443 ms 64 bytes from 192.168.15.242: icmp_seq=20 ttl=64 time=0.454 ms 64 bytes from 192.168.15.242: icmp_seq=21 ttl=64 time=0.466 ms 64 bytes from 192.168.15.242: icmp_seq=22 ttl=64 time=0.475 ms ^C --- 192.168.15.242 ping statistics --- 23 packets transmitted, 23 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.306/0.404/0.505/0.060 ms |
|
#ping 192.168.15.242
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on em0, link-type EN10MB (Ethernet), capture size 96 bytes 11:47:32.129530 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 0, length 64 11:47:33.129978 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 1, length 64 11:47:34.130257 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 2, length 64 11:47:35.131228 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 3, length 64 11:47:36.132663 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 4, length 64 11:47:37.133189 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 5, length 64 11:47:38.134170 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 6, length 64 11:47:39.135151 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 7, length 64 ... 64 bytes from 192.168.15.242: icmp_seq=17 ttl=64 time=0.501 ms 64 bytes from 192.168.15.242: icmp_seq=18 ttl=64 time=0.426 ms 64 bytes from 192.168.15.242: icmp_seq=19 ttl=64 time=0.443 ms 64 bytes from 192.168.15.242: icmp_seq=20 ttl=64 time=0.454 ms 64 bytes from 192.168.15.242: icmp_seq=21 ttl=64 time=0.466 ms 64 bytes from 192.168.15.242: icmp_seq=22 ttl=64 time=0.475 ms ^C --- 192.168.15.242 ping statistics --- 23 packets transmitted, 23 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.306/0.404/0.505/0.060 ms |
|
#ping 192.168.15.242
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on em0, link-type EN10MB (Ethernet), capture size 96 bytes 11:47:32.129530 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 0, length 64 11:47:33.129978 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 1, length 64 11:47:34.130257 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 2, length 64 11:47:35.131228 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 3, length 64 11:47:36.132663 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 4, length 64 11:47:37.133189 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 5, length 64 11:47:38.134170 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 6, length 64 11:47:39.135151 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 24848, seq 7, length 64 ... 64 bytes from 192.168.15.242: icmp_seq=17 ttl=64 time=0.501 ms 64 bytes from 192.168.15.242: icmp_seq=18 ttl=64 time=0.426 ms 64 bytes from 192.168.15.242: icmp_seq=19 ttl=64 time=0.443 ms 64 bytes from 192.168.15.242: icmp_seq=20 ttl=64 time=0.454 ms 64 bytes from 192.168.15.242: icmp_seq=21 ttl=64 time=0.466 ms 64 bytes from 192.168.15.242: icmp_seq=22 ttl=64 time=0.475 ms ^C --- 192.168.15.242 ping statistics --- 23 packets transmitted, 23 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.306/0.404/0.505/0.060 ms |
|
#ping 192.168.15.242
11:47:58.997176 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 4, length 64 11:47:59.997731 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 5, length 64 11:48:00.998720 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 6, length 64 11:48:01.999697 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 7, length 64 11:48:03.000681 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 8, length 64 11:48:04.001660 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 9, length 64 11:48:05.002633 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 10, length 64 11:48:06.003613 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 11, length 64 11:48:07.004595 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 12, length 64 11:48:08.005571 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 26384, seq 13, length 64 ... 11:54:29.348387 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 49, length 64 11:54:30.348951 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 50, length 64 11:54:31.349934 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 51, length 64 11:54:32.350914 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 52, length 64 11:54:33.351899 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 53, length 64 11:54:34.360106 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 54, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes ^C --- 192.168.15.242 ping statistics --- 55 packets transmitted, 0 packets received, 100% packet loss |
|
#pfctl -sr
No ALTQ support in kernel ALTQ related functions disabled block drop in all block drop out all pass out on em0 inet proto icmp from 192.168.15.0/24 to any keep state |
|
#pfctl -sr
No ALTQ support in kernel ALTQ related functions disabled block drop in all block drop out all pass out on em0 inet proto icmp from 192.168.15.0/24 to any keep state |
|
#pfctl -sr
No ALTQ support in kernel ALTQ related functions disabled block drop in all block drop out all pass out on em0 inet proto icmp from 192.168.15.0/24 to any keep state |
|
#ping 192.168.15.242
11:53:42.300916 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 2, length 64 11:53:43.301892 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 3, length 64 11:53:44.302875 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 4, length 64 11:53:45.303856 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 5, length 64 11:53:46.304838 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 6, length 64 11:53:47.305809 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 7, length 64 11:53:48.306789 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 8, length 64 11:53:49.307767 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 9, length 64 11:53:50.308747 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 10, length 64 11:53:51.309736 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 11, length 64 ... 11:55:29.134540 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 45, length 64 11:55:30.136805 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 46, length 64 11:55:31.172789 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 47, length 64 11:55:32.192750 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 48, length 64 11:55:33.193733 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 49, length 64 11:55:34.194691 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 50, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes ^C --- 192.168.15.242 ping statistics --- 51 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.242
11:53:42.300916 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 2, length 64 11:53:43.301892 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 3, length 64 11:53:44.302875 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 4, length 64 11:53:45.303856 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 5, length 64 11:53:46.304838 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 6, length 64 11:53:47.305809 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 7, length 64 11:53:48.306789 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 8, length 64 11:53:49.307767 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 9, length 64 11:53:50.308747 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 10, length 64 11:53:51.309736 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 11, length 64 ... 11:55:29.134540 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 45, length 64 11:55:30.136805 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 46, length 64 11:55:31.172789 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 47, length 64 11:55:32.192750 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 48, length 64 11:55:33.193733 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 49, length 64 11:55:34.194691 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 50, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes ^C --- 192.168.15.242 ping statistics --- 51 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.242
11:53:42.300916 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 2, length 64 11:53:43.301892 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 3, length 64 11:53:44.302875 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 4, length 64 11:53:45.303856 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 5, length 64 11:53:46.304838 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 6, length 64 11:53:47.305809 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 7, length 64 11:53:48.306789 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 8, length 64 11:53:49.307767 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 9, length 64 11:53:50.308747 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 10, length 64 11:53:51.309736 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 11, length 64 ... 11:55:29.134540 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 45, length 64 11:55:30.136805 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 46, length 64 11:55:31.172789 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 47, length 64 11:55:32.192750 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 48, length 64 11:55:33.193733 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 49, length 64 11:55:34.194691 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 50, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes ^C --- 192.168.15.242 ping statistics --- 51 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.243
11:54:16.334239 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 36, length 64 11:54:17.335210 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 37, length 64 11:54:18.336188 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 38, length 64 11:54:19.337628 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 39, length 64 11:54:20.338165 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 40, length 64 11:54:21.339142 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 41, length 64 11:54:22.340110 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 42, length 64 11:54:23.341097 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 43, length 64 11:54:24.342072 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 44, length 64 11:54:25.343052 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 45, length 64 ... 11:56:25.247666 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 28, length 64 11:56:26.248645 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 29, length 64 11:56:27.249623 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 30, length 64 11:56:28.250603 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 31, length 64 11:56:29.281645 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 32, length 64 11:56:30.282630 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 33, length 64 PING 192.168.15.243 (192.168.15.243): 56 data bytes ^C --- 192.168.15.243 ping statistics --- 34 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.243
11:54:16.334239 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 36, length 64 11:54:17.335210 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 37, length 64 11:54:18.336188 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 38, length 64 11:54:19.337628 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 39, length 64 11:54:20.338165 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 40, length 64 11:54:21.339142 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 41, length 64 11:54:22.340110 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 42, length 64 11:54:23.341097 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 43, length 64 11:54:24.342072 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 44, length 64 11:54:25.343052 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 45, length 64 ... 11:56:25.247666 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 28, length 64 11:56:26.248645 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 29, length 64 11:56:27.249623 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 30, length 64 11:56:28.250603 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 31, length 64 11:56:29.281645 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 32, length 64 11:56:30.282630 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 33, length 64 PING 192.168.15.243 (192.168.15.243): 56 data bytes ^C --- 192.168.15.243 ping statistics --- 34 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.243
11:54:16.334239 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 36, length 64 11:54:17.335210 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 37, length 64 11:54:18.336188 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 38, length 64 11:54:19.337628 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 39, length 64 11:54:20.338165 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 40, length 64 11:54:21.339142 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 41, length 64 11:54:22.340110 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 42, length 64 11:54:23.341097 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 43, length 64 11:54:24.342072 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 44, length 64 11:54:25.343052 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 45, length 64 ... 11:56:25.247666 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 28, length 64 11:56:26.248645 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 29, length 64 11:56:27.249623 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 30, length 64 11:56:28.250603 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 31, length 64 11:56:29.281645 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 32, length 64 11:56:30.282630 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 33, length 64 PING 192.168.15.243 (192.168.15.243): 56 data bytes ^C --- 192.168.15.243 ping statistics --- 34 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.243
11:54:16.334239 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 36, length 64 11:54:17.335210 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 37, length 64 11:54:18.336188 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 38, length 64 11:54:19.337628 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 39, length 64 11:54:20.338165 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 40, length 64 11:54:21.339142 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 41, length 64 11:54:22.340110 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 42, length 64 11:54:23.341097 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 43, length 64 11:54:24.342072 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 44, length 64 11:54:25.343052 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 45, length 64 ... 11:56:25.247666 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 28, length 64 11:56:26.248645 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 29, length 64 11:56:27.249623 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 30, length 64 11:56:28.250603 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 31, length 64 11:56:29.281645 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 32, length 64 11:56:30.282630 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 33, length 64 PING 192.168.15.243 (192.168.15.243): 56 data bytes ^C --- 192.168.15.243 ping statistics --- 34 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.243
11:54:16.334239 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 36, length 64 11:54:17.335210 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 37, length 64 11:54:18.336188 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 38, length 64 11:54:19.337628 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 39, length 64 11:54:20.338165 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 40, length 64 11:54:21.339142 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 41, length 64 11:54:22.340110 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 42, length 64 11:54:23.341097 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 43, length 64 11:54:24.342072 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 44, length 64 11:54:25.343052 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 45, length 64 ... 11:56:25.247666 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 28, length 64 11:56:26.248645 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 29, length 64 11:56:27.249623 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 30, length 64 11:56:28.250603 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 31, length 64 11:56:29.281645 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 32, length 64 11:56:30.282630 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 33, length 64 PING 192.168.15.243 (192.168.15.243): 56 data bytes ^C --- 192.168.15.243 ping statistics --- 34 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.243
11:54:16.334239 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 36, length 64 11:54:17.335210 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 37, length 64 11:54:18.336188 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 38, length 64 11:54:19.337628 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 39, length 64 11:54:20.338165 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 40, length 64 11:54:21.339142 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 41, length 64 11:54:22.340110 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 42, length 64 11:54:23.341097 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 43, length 64 11:54:24.342072 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 44, length 64 11:54:25.343052 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 45, length 64 ... 11:56:25.247666 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 28, length 64 11:56:26.248645 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 29, length 64 11:56:27.249623 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 30, length 64 11:56:28.250603 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 31, length 64 11:56:29.281645 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 32, length 64 11:56:30.282630 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 33, length 64 PING 192.168.15.243 (192.168.15.243): 56 data bytes ^C --- 192.168.15.243 ping statistics --- 34 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.243
11:54:16.334239 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 36, length 64 11:54:17.335210 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 37, length 64 11:54:18.336188 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 38, length 64 11:54:19.337628 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 39, length 64 11:54:20.338165 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 40, length 64 11:54:21.339142 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 41, length 64 11:54:22.340110 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 42, length 64 11:54:23.341097 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 43, length 64 11:54:24.342072 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 44, length 64 11:54:25.343052 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 60944, seq 45, length 64 ... 11:56:25.247666 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 28, length 64 11:56:26.248645 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 29, length 64 11:56:27.249623 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 30, length 64 11:56:28.250603 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 31, length 64 11:56:29.281645 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 32, length 64 11:56:30.282630 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 33, length 64 PING 192.168.15.243 (192.168.15.243): 56 data bytes ^C --- 192.168.15.243 ping statistics --- 34 packets transmitted, 0 packets received, 100% packet loss |
|
#vim frw.conf
3c3,4 < pass out on em0 proto icmp from 192.168.15.0/24 keep state --- > pass out on em0 proto icmp from 192.168.15.0/24 > pass in on em0 proto icmp from 192.168.15.0/24 |
|
#pfctl -f ~/frw.conf
11:54:59.227261 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 12, length 64 11:54:59.968370 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 16, length 64 11:55:00.228251 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 13, length 64 11:55:00.972805 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 17, length 64 11:55:01.229253 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 14, length 64 11:55:01.973330 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 18, length 64 11:55:02.230238 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 15, length 64 11:55:02.974303 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 19, length 64 11:55:03.236221 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 16, length 64 11:55:03.975296 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 20, length 64 ... 11:57:56.240925 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 8, length 64 11:57:56.241154 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 8, length 64 11:57:56.462803 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 14, length 64 11:57:56.462912 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 14, length 64 11:57:57.241884 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 9, length 64 11:57:57.242143 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 9, length 64 11:57:57.463793 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 15, length 64 11:57:57.463900 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 15, length 64 No ALTQ support in kernel ALTQ related functions disabled |
|
#pfctl -f ~/frw.conf
11:55:02.230238 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 15, length 64 11:55:02.974303 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 19, length 64 11:55:03.236221 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 16, length 64 11:55:03.975296 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 20, length 64 11:55:04.257200 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 17, length 64 11:55:04.983317 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 21, length 64 11:55:05.309160 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 18, length 64 11:55:05.984243 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 22, length 64 11:55:06.351373 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 19, length 64 11:55:06.993286 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 23, length 64 ... 11:57:57.463793 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 15, length 64 11:57:57.463900 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 15, length 64 11:57:58.242846 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 10, length 64 11:57:58.243272 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 10, length 64 11:57:58.464766 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 16, length 64 11:57:58.464849 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 16, length 64 11:57:59.243816 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 11, length 64 11:57:59.244265 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 11, length 64 No ALTQ support in kernel ALTQ related functions disabled |
|
#pfctl -f ~/frw.conf
11:55:02.230238 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 15, length 64 11:55:02.974303 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 19, length 64 11:55:03.236221 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 16, length 64 11:55:03.975296 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 20, length 64 11:55:04.257200 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 17, length 64 11:55:04.983317 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 21, length 64 11:55:05.309160 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 18, length 64 11:55:05.984243 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 22, length 64 11:55:06.351373 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 19, length 64 11:55:06.993286 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 23, length 64 ... 11:57:57.463793 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 15, length 64 11:57:57.463900 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 15, length 64 11:57:58.242846 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 10, length 64 11:57:58.243272 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 10, length 64 11:57:58.464766 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 16, length 64 11:57:58.464849 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 16, length 64 11:57:59.243816 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 11, length 64 11:57:59.244265 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 11, length 64 No ALTQ support in kernel ALTQ related functions disabled |
|
#pfctl -f ~/frw.conf
11:55:02.230238 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 15, length 64 11:55:02.974303 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 19, length 64 11:55:03.236221 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 16, length 64 11:55:03.975296 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 20, length 64 11:55:04.257200 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 17, length 64 11:55:04.983317 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 21, length 64 11:55:05.309160 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 18, length 64 11:55:05.984243 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 22, length 64 11:55:06.351373 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 19, length 64 11:55:06.993286 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 23, length 64 ... 11:57:57.463793 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 15, length 64 11:57:57.463900 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 15, length 64 11:57:58.242846 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 10, length 64 11:57:58.243272 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 10, length 64 11:57:58.464766 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 16, length 64 11:57:58.464849 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 16, length 64 11:57:59.243816 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 11, length 64 11:57:59.244265 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 11, length 64 No ALTQ support in kernel ALTQ related functions disabled |
|
#pfctl -f ~/frw.conf
11:55:02.230238 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 15, length 64 11:55:02.974303 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 19, length 64 11:55:03.236221 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 16, length 64 11:55:03.975296 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 20, length 64 11:55:04.257200 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 17, length 64 11:55:04.983317 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 21, length 64 11:55:05.309160 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 18, length 64 11:55:05.984243 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 22, length 64 11:55:06.351373 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 19, length 64 11:55:06.993286 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 23, length 64 ... 11:57:57.463793 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 15, length 64 11:57:57.463900 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 15, length 64 11:57:58.242846 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 10, length 64 11:57:58.243272 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 10, length 64 11:57:58.464766 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 16, length 64 11:57:58.464849 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 16, length 64 11:57:59.243816 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 11, length 64 11:57:59.244265 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 11, length 64 No ALTQ support in kernel ALTQ related functions disabled |
|
#pfctl -f ~/frw.conf
11:55:04.257200 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 17, length 64 11:55:04.983317 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 21, length 64 11:55:05.309160 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 18, length 64 11:55:05.984243 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 22, length 64 11:55:06.351373 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 19, length 64 11:55:06.993286 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 23, length 64 11:55:07.352154 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 20, length 64 11:55:08.013254 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 24, length 64 11:55:08.353147 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 21, length 64 11:55:09.014191 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 25, length 64 ... 11:57:58.464766 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 16, length 64 11:57:58.464849 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 16, length 64 11:57:59.243816 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 11, length 64 11:57:59.244265 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 11, length 64 11:57:59.465882 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 17, length 64 11:57:59.465986 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 17, length 64 11:58:00.244843 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 12, length 64 11:58:00.245250 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 12, length 64 No ALTQ support in kernel ALTQ related functions disabled |
|
#pfctl -f ~/frw.conf
11:55:04.257200 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 17, length 64 11:55:04.983317 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 21, length 64 11:55:05.309160 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 18, length 64 11:55:05.984243 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 22, length 64 11:55:06.351373 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 19, length 64 11:55:06.993286 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 23, length 64 11:55:07.352154 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 20, length 64 11:55:08.013254 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 24, length 64 11:55:08.353147 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 21, length 64 11:55:09.014191 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 25, length 64 ... 11:57:58.464766 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 16, length 64 11:57:58.464849 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 16, length 64 11:57:59.243816 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 11, length 64 11:57:59.244265 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 11, length 64 11:57:59.465882 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 17, length 64 11:57:59.465986 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 17, length 64 11:58:00.244843 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 12, length 64 11:58:00.245250 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 12, length 64 No ALTQ support in kernel ALTQ related functions disabled |
|
#ping 192.168.15.242
11:55:59.111193 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 2, length 64 11:56:00.112174 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 3, length 64 11:56:01.113144 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 4, length 64 11:56:02.137158 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 5, length 64 11:56:03.141161 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 6, length 64 11:56:04.143139 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 7, length 64 11:56:05.144089 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 8, length 64 11:56:06.145045 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 9, length 64 11:56:07.152082 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 10, length 64 11:56:08.164063 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 11, length 64 ... 64 bytes from 192.168.15.242: icmp_seq=15 ttl=64 time=0.457 ms 64 bytes from 192.168.15.242: icmp_seq=16 ttl=64 time=0.487 ms 64 bytes from 192.168.15.242: icmp_seq=17 ttl=64 time=0.475 ms 64 bytes from 192.168.15.242: icmp_seq=18 ttl=64 time=0.537 ms 64 bytes from 192.168.15.242: icmp_seq=19 ttl=64 time=0.386 ms 64 bytes from 192.168.15.242: icmp_seq=20 ttl=64 time=0.395 ms ^C --- 192.168.15.242 ping statistics --- 21 packets transmitted, 21 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.349/0.480/0.615/0.081 ms |
|
#ping 192.168.15.242
11:55:59.111193 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 2, length 64 11:56:00.112174 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 3, length 64 11:56:01.113144 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 4, length 64 11:56:02.137158 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 5, length 64 11:56:03.141161 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 6, length 64 11:56:04.143139 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 7, length 64 11:56:05.144089 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 8, length 64 11:56:06.145045 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 9, length 64 11:56:07.152082 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 10, length 64 11:56:08.164063 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 11, length 64 ... 64 bytes from 192.168.15.242: icmp_seq=15 ttl=64 time=0.457 ms 64 bytes from 192.168.15.242: icmp_seq=16 ttl=64 time=0.487 ms 64 bytes from 192.168.15.242: icmp_seq=17 ttl=64 time=0.475 ms 64 bytes from 192.168.15.242: icmp_seq=18 ttl=64 time=0.537 ms 64 bytes from 192.168.15.242: icmp_seq=19 ttl=64 time=0.386 ms 64 bytes from 192.168.15.242: icmp_seq=20 ttl=64 time=0.395 ms ^C --- 192.168.15.242 ping statistics --- 21 packets transmitted, 21 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.349/0.480/0.615/0.081 ms |
|
#ping 192.168.15.242
11:55:59.111193 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 2, length 64 11:56:00.112174 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 3, length 64 11:56:01.113144 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 4, length 64 11:56:02.137158 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 5, length 64 11:56:03.141161 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 6, length 64 11:56:04.143139 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 7, length 64 11:56:05.144089 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 8, length 64 11:56:06.145045 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 9, length 64 11:56:07.152082 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 10, length 64 11:56:08.164063 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 11, length 64 ... 64 bytes from 192.168.15.242: icmp_seq=15 ttl=64 time=0.457 ms 64 bytes from 192.168.15.242: icmp_seq=16 ttl=64 time=0.487 ms 64 bytes from 192.168.15.242: icmp_seq=17 ttl=64 time=0.475 ms 64 bytes from 192.168.15.242: icmp_seq=18 ttl=64 time=0.537 ms 64 bytes from 192.168.15.242: icmp_seq=19 ttl=64 time=0.386 ms 64 bytes from 192.168.15.242: icmp_seq=20 ttl=64 time=0.395 ms ^C --- 192.168.15.242 ping statistics --- 21 packets transmitted, 21 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.349/0.480/0.615/0.081 ms |
|
#ping 192.168.15.242
11:55:59.111193 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 2, length 64 11:56:00.112174 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 3, length 64 11:56:01.113144 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 4, length 64 11:56:02.137158 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 5, length 64 11:56:03.141161 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 6, length 64 11:56:04.143139 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 7, length 64 11:56:05.144089 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 8, length 64 11:56:06.145045 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 9, length 64 11:56:07.152082 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 10, length 64 11:56:08.164063 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 11, length 64 ... 64 bytes from 192.168.15.242: icmp_seq=15 ttl=64 time=0.457 ms 64 bytes from 192.168.15.242: icmp_seq=16 ttl=64 time=0.487 ms 64 bytes from 192.168.15.242: icmp_seq=17 ttl=64 time=0.475 ms 64 bytes from 192.168.15.242: icmp_seq=18 ttl=64 time=0.537 ms 64 bytes from 192.168.15.242: icmp_seq=19 ttl=64 time=0.386 ms 64 bytes from 192.168.15.242: icmp_seq=20 ttl=64 time=0.395 ms ^C --- 192.168.15.242 ping statistics --- 21 packets transmitted, 21 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.349/0.480/0.615/0.081 ms |
|
#ping 192.168.15.242
11:55:59.111193 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 2, length 64 11:56:00.112174 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 3, length 64 11:56:01.113144 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 4, length 64 11:56:02.137158 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 5, length 64 11:56:03.141161 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 6, length 64 11:56:04.143139 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 7, length 64 11:56:05.144089 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 8, length 64 11:56:06.145045 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 9, length 64 11:56:07.152082 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 10, length 64 11:56:08.164063 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 11, length 64 ... 64 bytes from 192.168.15.242: icmp_seq=15 ttl=64 time=0.457 ms 64 bytes from 192.168.15.242: icmp_seq=16 ttl=64 time=0.487 ms 64 bytes from 192.168.15.242: icmp_seq=17 ttl=64 time=0.475 ms 64 bytes from 192.168.15.242: icmp_seq=18 ttl=64 time=0.537 ms 64 bytes from 192.168.15.242: icmp_seq=19 ttl=64 time=0.386 ms 64 bytes from 192.168.15.242: icmp_seq=20 ttl=64 time=0.395 ms ^C --- 192.168.15.242 ping statistics --- 21 packets transmitted, 21 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.349/0.480/0.615/0.081 ms |
|
#ping 192.168.15.242
11:55:59.111193 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 2, length 64 11:56:00.112174 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 3, length 64 11:56:01.113144 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 4, length 64 11:56:02.137158 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 5, length 64 11:56:03.141161 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 6, length 64 11:56:04.143139 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 7, length 64 11:56:05.144089 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 8, length 64 11:56:06.145045 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 9, length 64 11:56:07.152082 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 10, length 64 11:56:08.164063 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 11, length 64 ... 64 bytes from 192.168.15.242: icmp_seq=15 ttl=64 time=0.457 ms 64 bytes from 192.168.15.242: icmp_seq=16 ttl=64 time=0.487 ms 64 bytes from 192.168.15.242: icmp_seq=17 ttl=64 time=0.475 ms 64 bytes from 192.168.15.242: icmp_seq=18 ttl=64 time=0.537 ms 64 bytes from 192.168.15.242: icmp_seq=19 ttl=64 time=0.386 ms 64 bytes from 192.168.15.242: icmp_seq=20 ttl=64 time=0.395 ms ^C --- 192.168.15.242 ping statistics --- 21 packets transmitted, 21 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.349/0.480/0.615/0.081 ms |
|
#ping 192.168.15.242
11:55:59.111193 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 2, length 64 11:56:00.112174 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 3, length 64 11:56:01.113144 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 4, length 64 11:56:02.137158 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 5, length 64 11:56:03.141161 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 6, length 64 11:56:04.143139 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 7, length 64 11:56:05.144089 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 8, length 64 11:56:06.145045 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 9, length 64 11:56:07.152082 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 10, length 64 11:56:08.164063 IP 192.168.15.237 > 192.168.15.243: ICMP echo request, id 6161, seq 11, length 64 ... 64 bytes from 192.168.15.242: icmp_seq=15 ttl=64 time=0.457 ms 64 bytes from 192.168.15.242: icmp_seq=16 ttl=64 time=0.487 ms 64 bytes from 192.168.15.242: icmp_seq=17 ttl=64 time=0.475 ms 64 bytes from 192.168.15.242: icmp_seq=18 ttl=64 time=0.537 ms 64 bytes from 192.168.15.242: icmp_seq=19 ttl=64 time=0.386 ms 64 bytes from 192.168.15.242: icmp_seq=20 ttl=64 time=0.395 ms ^C --- 192.168.15.242 ping statistics --- 21 packets transmitted, 21 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.349/0.480/0.615/0.081 ms |
|
#vim frw.conf
|
|
#vim frw.conf
|
|
#vim frw.conf
3,4c3,4 < pass out on em0 proto icmp from 192.168.15.0/24 < pass in on em0 proto icmp from 192.168.15.0/24 --- > pass out quick on em0 proto icmp from 192.168.15.0/24 keep state > #pass in on em0 proto icmp from 192.168.15.0/24 |
|
#pfctl -f ~/frw.conf
11:55:21.094942 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 37, length 64 11:55:21.440948 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 34, length 64 11:55:22.098169 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 38, length 64 11:55:22.441935 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 35, length 64 11:55:23.098910 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 39, length 64 11:55:23.442927 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 36, length 64 11:55:24.099888 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 40, length 64 11:55:24.443918 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 37, length 64 11:55:25.100867 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 64016, seq 41, length 64 11:55:25.444911 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 27930, seq 38, length 64 ... 11:58:06.525863 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 24, length 64 11:58:07.251637 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 19, length 64 11:58:07.251919 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 19, length 64 11:58:07.526759 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 25, length 64 11:58:07.526845 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 25, length 64 11:58:08.252618 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 20, length 64 11:58:08.252910 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 20, length 64 11:59:11.420659 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 0, length 64 No ALTQ support in kernel ALTQ related functions disabled |
|
#ping 192.168.15.242
11:58:04.249089 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 16, length 64 11:58:04.523782 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 22, length 64 11:58:04.523870 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 22, length 64 11:58:05.249689 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 17, length 64 11:58:05.250062 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 17, length 64 11:58:05.524778 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 23, length 64 11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 ... 12:00:20.332921 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 60, length 64 12:00:21.269029 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 62, length 64 12:00:21.333909 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 61, length 64 12:00:22.269958 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 63, length 64 12:00:22.334889 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 62, length 64 12:00:23.270985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 64, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes ^C --- 192.168.15.242 ping statistics --- 136 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.242
11:58:04.249089 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 16, length 64 11:58:04.523782 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 22, length 64 11:58:04.523870 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 22, length 64 11:58:05.249689 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 17, length 64 11:58:05.250062 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 17, length 64 11:58:05.524778 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 23, length 64 11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 ... 12:00:20.332921 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 60, length 64 12:00:21.269029 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 62, length 64 12:00:21.333909 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 61, length 64 12:00:22.269958 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 63, length 64 12:00:22.334889 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 62, length 64 12:00:23.270985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 64, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes ^C --- 192.168.15.242 ping statistics --- 136 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.242
11:58:04.249089 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 16, length 64 11:58:04.523782 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 22, length 64 11:58:04.523870 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 22, length 64 11:58:05.249689 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 17, length 64 11:58:05.250062 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 17, length 64 11:58:05.524778 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 23, length 64 11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 ... 12:00:20.332921 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 60, length 64 12:00:21.269029 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 62, length 64 12:00:21.333909 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 61, length 64 12:00:22.269958 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 63, length 64 12:00:22.334889 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 62, length 64 12:00:23.270985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 64, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes ^C --- 192.168.15.242 ping statistics --- 136 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.242
11:58:04.249089 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 16, length 64 11:58:04.523782 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 22, length 64 11:58:04.523870 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 22, length 64 11:58:05.249689 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 17, length 64 11:58:05.250062 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 17, length 64 11:58:05.524778 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 23, length 64 11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 ... 12:00:20.332921 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 60, length 64 12:00:21.269029 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 62, length 64 12:00:21.333909 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 61, length 64 12:00:22.269958 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 63, length 64 12:00:22.334889 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 62, length 64 12:00:23.270985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 64, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes ^C --- 192.168.15.242 ping statistics --- 136 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.242
11:58:04.249089 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 16, length 64 11:58:04.523782 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 22, length 64 11:58:04.523870 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 22, length 64 11:58:05.249689 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 17, length 64 11:58:05.250062 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 17, length 64 11:58:05.524778 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 23, length 64 11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 ... 12:00:20.332921 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 60, length 64 12:00:21.269029 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 62, length 64 12:00:21.333909 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 61, length 64 12:00:22.269958 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 63, length 64 12:00:22.334889 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 62, length 64 12:00:23.270985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 64, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes ^C --- 192.168.15.242 ping statistics --- 136 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.242
11:58:04.249089 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 16, length 64 11:58:04.523782 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 22, length 64 11:58:04.523870 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 22, length 64 11:58:05.249689 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 17, length 64 11:58:05.250062 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 17, length 64 11:58:05.524778 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 23, length 64 11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 ... 12:00:20.332921 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 60, length 64 12:00:21.269029 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 62, length 64 12:00:21.333909 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 61, length 64 12:00:22.269958 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 63, length 64 12:00:22.334889 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 62, length 64 12:00:23.270985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 64, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes ^C --- 192.168.15.242 ping statistics --- 136 packets transmitted, 0 packets received, 100% packet loss |
|
#ping 192.168.15.242
11:58:04.249089 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 16, length 64 11:58:04.523782 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 22, length 64 11:58:04.523870 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 22, length 64 11:58:05.249689 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 17, length 64 11:58:05.250062 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 17, length 64 11:58:05.524778 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 23, length 64 11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 ... 12:00:20.332921 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 60, length 64 12:00:21.269029 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 62, length 64 12:00:21.333909 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 61, length 64 12:00:22.269958 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 63, length 64 12:00:22.334889 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 62, length 64 12:00:23.270985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 64, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes ^C --- 192.168.15.242 ping statistics --- 136 packets transmitted, 0 packets received, 100% packet loss |
|
#vim frw.conf
4c4 < #pass in on em0 proto icmp from 192.168.15.0/24 --- > pass in on em0 proto icmp from 192.168.15.0/24 to any keep state |
|
#vim frw.conf
4c4 < #pass in on em0 proto icmp from 192.168.15.0/24 --- > pass in on em0 proto icmp from 192.168.15.0/24 to any keep state |
|
#ping 192.168.15.242
11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 11:58:06.525863 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 24, length 64 11:58:07.251637 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 19, length 64 11:58:07.251919 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 19, length 64 11:58:07.526759 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 25, length 64 11:58:07.526845 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 25, length 64 11:58:08.252618 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 20, length 64 ... PING 192.168.15.242 (192.168.15.242): 56 data bytes 64 bytes from 192.168.15.242: icmp_seq=0 ttl=64 time=0.749 ms 64 bytes from 192.168.15.242: icmp_seq=1 ttl=64 time=0.331 ms 64 bytes from 192.168.15.242: icmp_seq=2 ttl=64 time=0.579 ms 64 bytes from 192.168.15.242: icmp_seq=3 ttl=64 time=0.486 ms q64 bytes from 192.168.15.242: icmp_seq=4 ttl=64 time=0.456 ms ^C --- 192.168.15.242 ping statistics --- 5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.331/0.520/0.749/0.139 ms |
|
#ping 192.168.15.242
11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 11:58:06.525863 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 24, length 64 11:58:07.251637 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 19, length 64 11:58:07.251919 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 19, length 64 11:58:07.526759 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 25, length 64 11:58:07.526845 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 25, length 64 11:58:08.252618 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 20, length 64 ... PING 192.168.15.242 (192.168.15.242): 56 data bytes 64 bytes from 192.168.15.242: icmp_seq=0 ttl=64 time=0.749 ms 64 bytes from 192.168.15.242: icmp_seq=1 ttl=64 time=0.331 ms 64 bytes from 192.168.15.242: icmp_seq=2 ttl=64 time=0.579 ms 64 bytes from 192.168.15.242: icmp_seq=3 ttl=64 time=0.486 ms q64 bytes from 192.168.15.242: icmp_seq=4 ttl=64 time=0.456 ms ^C --- 192.168.15.242 ping statistics --- 5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.331/0.520/0.749/0.139 ms |
|
#ping 192.168.15.242
11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 11:58:06.525863 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 24, length 64 11:58:07.251637 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 19, length 64 11:58:07.251919 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 19, length 64 11:58:07.526759 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 25, length 64 11:58:07.526845 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 25, length 64 11:58:08.252618 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 20, length 64 ... PING 192.168.15.242 (192.168.15.242): 56 data bytes 64 bytes from 192.168.15.242: icmp_seq=0 ttl=64 time=0.749 ms 64 bytes from 192.168.15.242: icmp_seq=1 ttl=64 time=0.331 ms 64 bytes from 192.168.15.242: icmp_seq=2 ttl=64 time=0.579 ms 64 bytes from 192.168.15.242: icmp_seq=3 ttl=64 time=0.486 ms q64 bytes from 192.168.15.242: icmp_seq=4 ttl=64 time=0.456 ms ^C --- 192.168.15.242 ping statistics --- 5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.331/0.520/0.749/0.139 ms |
|
#ping 192.168.15.242
11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 11:58:06.525863 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 24, length 64 11:58:07.251637 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 19, length 64 11:58:07.251919 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 19, length 64 11:58:07.526759 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 25, length 64 11:58:07.526845 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 25, length 64 11:58:08.252618 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 20, length 64 ... PING 192.168.15.242 (192.168.15.242): 56 data bytes 64 bytes from 192.168.15.242: icmp_seq=0 ttl=64 time=0.749 ms 64 bytes from 192.168.15.242: icmp_seq=1 ttl=64 time=0.331 ms 64 bytes from 192.168.15.242: icmp_seq=2 ttl=64 time=0.579 ms 64 bytes from 192.168.15.242: icmp_seq=3 ttl=64 time=0.486 ms q64 bytes from 192.168.15.242: icmp_seq=4 ttl=64 time=0.456 ms ^C --- 192.168.15.242 ping statistics --- 5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.331/0.520/0.749/0.139 ms |
|
#ping 192.168.15.242
11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 11:58:06.525863 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 24, length 64 11:58:07.251637 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 19, length 64 11:58:07.251919 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 19, length 64 11:58:07.526759 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 25, length 64 11:58:07.526845 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 25, length 64 11:58:08.252618 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 20, length 64 ... PING 192.168.15.242 (192.168.15.242): 56 data bytes 64 bytes from 192.168.15.242: icmp_seq=0 ttl=64 time=0.749 ms 64 bytes from 192.168.15.242: icmp_seq=1 ttl=64 time=0.331 ms 64 bytes from 192.168.15.242: icmp_seq=2 ttl=64 time=0.579 ms 64 bytes from 192.168.15.242: icmp_seq=3 ttl=64 time=0.486 ms q64 bytes from 192.168.15.242: icmp_seq=4 ttl=64 time=0.456 ms ^C --- 192.168.15.242 ping statistics --- 5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.331/0.520/0.749/0.139 ms |
|
#ping 192.168.15.242
11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 11:58:06.525863 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 24, length 64 11:58:07.251637 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 19, length 64 11:58:07.251919 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 19, length 64 11:58:07.526759 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 25, length 64 11:58:07.526845 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 25, length 64 11:58:08.252618 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 20, length 64 ... PING 192.168.15.242 (192.168.15.242): 56 data bytes 64 bytes from 192.168.15.242: icmp_seq=0 ttl=64 time=0.749 ms 64 bytes from 192.168.15.242: icmp_seq=1 ttl=64 time=0.331 ms 64 bytes from 192.168.15.242: icmp_seq=2 ttl=64 time=0.579 ms 64 bytes from 192.168.15.242: icmp_seq=3 ttl=64 time=0.486 ms q64 bytes from 192.168.15.242: icmp_seq=4 ttl=64 time=0.456 ms ^C --- 192.168.15.242 ping statistics --- 5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.331/0.520/0.749/0.139 ms |
|
#ping 192.168.15.242
11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 11:58:06.525863 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 24, length 64 11:58:07.251637 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 19, length 64 11:58:07.251919 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 19, length 64 11:58:07.526759 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 25, length 64 11:58:07.526845 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 25, length 64 11:58:08.252618 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 20, length 64 ... PING 192.168.15.242 (192.168.15.242): 56 data bytes 64 bytes from 192.168.15.242: icmp_seq=0 ttl=64 time=0.749 ms 64 bytes from 192.168.15.242: icmp_seq=1 ttl=64 time=0.331 ms 64 bytes from 192.168.15.242: icmp_seq=2 ttl=64 time=0.579 ms 64 bytes from 192.168.15.242: icmp_seq=3 ttl=64 time=0.486 ms q64 bytes from 192.168.15.242: icmp_seq=4 ttl=64 time=0.456 ms ^C --- 192.168.15.242 ping statistics --- 5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.331/0.520/0.749/0.139 ms |
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
|
#ping 192.168.15.242
PING 192.168.15.242 (192.168.15.242): 56 data bytes 64 bytes from 192.168.15.242: icmp_seq=0 ttl=64 time=0.472 ms 64 bytes from 192.168.15.242: icmp_seq=1 ttl=64 time=0.496 ms 64 bytes from 192.168.15.242: icmp_seq=2 ttl=64 time=0.496 ms 64 bytes from 192.168.15.242: icmp_seq=3 ttl=64 time=0.514 ms 64 bytes from 192.168.15.242: icmp_seq=4 ttl=64 time=0.527 ms 64 bytes from 192.168.15.242: icmp_seq=5 ttl=64 time=0.373 ms 64 bytes from 192.168.15.242: icmp_seq=6 ttl=64 time=0.542 ms 64 bytes from 192.168.15.242: icmp_seq=7 ttl=64 time=0.547 ms 64 bytes from 192.168.15.242: icmp_seq=8 ttl=64 time=0.569 ms 64 bytes from 192.168.15.242: icmp_seq=9 ttl=64 time=0.574 ms ^C --- 192.168.15.242 ping statistics --- 10 packets transmitted, 10 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.373/0.511/0.574/0.056 ms |
|
#ping 192.168.15.242
PING 192.168.15.242 (192.168.15.242): 56 data bytes 64 bytes from 192.168.15.242: icmp_seq=0 ttl=64 time=0.472 ms 64 bytes from 192.168.15.242: icmp_seq=1 ttl=64 time=0.496 ms 64 bytes from 192.168.15.242: icmp_seq=2 ttl=64 time=0.496 ms 64 bytes from 192.168.15.242: icmp_seq=3 ttl=64 time=0.514 ms 64 bytes from 192.168.15.242: icmp_seq=4 ttl=64 time=0.527 ms 64 bytes from 192.168.15.242: icmp_seq=5 ttl=64 time=0.373 ms 64 bytes from 192.168.15.242: icmp_seq=6 ttl=64 time=0.542 ms 64 bytes from 192.168.15.242: icmp_seq=7 ttl=64 time=0.547 ms 64 bytes from 192.168.15.242: icmp_seq=8 ttl=64 time=0.569 ms 64 bytes from 192.168.15.242: icmp_seq=9 ttl=64 time=0.574 ms ^C --- 192.168.15.242 ping statistics --- 10 packets transmitted, 10 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.373/0.511/0.574/0.056 ms |
|
#ping 192.168.15.242
PING 192.168.15.242 (192.168.15.242): 56 data bytes 64 bytes from 192.168.15.242: icmp_seq=0 ttl=64 time=0.472 ms 64 bytes from 192.168.15.242: icmp_seq=1 ttl=64 time=0.496 ms 64 bytes from 192.168.15.242: icmp_seq=2 ttl=64 time=0.496 ms 64 bytes from 192.168.15.242: icmp_seq=3 ttl=64 time=0.514 ms 64 bytes from 192.168.15.242: icmp_seq=4 ttl=64 time=0.527 ms 64 bytes from 192.168.15.242: icmp_seq=5 ttl=64 time=0.373 ms 64 bytes from 192.168.15.242: icmp_seq=6 ttl=64 time=0.542 ms 64 bytes from 192.168.15.242: icmp_seq=7 ttl=64 time=0.547 ms 64 bytes from 192.168.15.242: icmp_seq=8 ttl=64 time=0.569 ms 64 bytes from 192.168.15.242: icmp_seq=9 ttl=64 time=0.574 ms ^C --- 192.168.15.242 ping statistics --- 10 packets transmitted, 10 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.373/0.511/0.574/0.056 ms |
| Время первой команды журнала | 11:45:31 2007- 9-12 | ||||||||||||||||||
| Время последней команды журнала | 12:20:00 2007- 9-12 | ||||||||||||||||||
| Количество командных строк в журнале | 101 | ||||||||||||||||||
| Процент команд с ненулевым кодом завершения, % | 30.69 | ||||||||||||||||||
| Процент синтаксически неверно набранных команд, % | 0.00 | ||||||||||||||||||
| Суммарное время работы с терминалом *, час | 0.57 | ||||||||||||||||||
| Количество командных строк в единицу времени, команда/мин | 2.93 | ||||||||||||||||||
| Частота использования команд |
|
В журнал автоматически попадают все команды, данные в любом терминале системы.
Для того чтобы убедиться, что журнал на текущем терминале ведётся, и команды записываются, дайте команду w. В поле WHAT, соответствующем текущему терминалу, должна быть указана программа script.
Команды, при наборе которых были допущены синтаксические ошибки, выводятся перечёркнутым текстом:
$ l s-l bash: l: command not found |
Если код завершения команды равен нулю, команда была выполнена без ошибок. Команды, код завершения которых отличен от нуля, выделяются цветом.
$ test 5 -lt 4 |
Команды, ход выполнения которых был прерван пользователем, выделяются цветом.
$ find / -name abc find: /home/devi-orig/.gnome2: Keine Berechtigung find: /home/devi-orig/.gnome2_private: Keine Berechtigung find: /home/devi-orig/.nautilus/metafiles: Keine Berechtigung find: /home/devi-orig/.metacity: Keine Berechtigung find: /home/devi-orig/.inkscape: Keine Berechtigung ^C |
Команды, выполненные с привилегиями суперпользователя, выделяются слева красной чертой.
# id uid=0(root) gid=0(root) Gruppen=0(root) |
Изменения, внесённые в текстовый файл с помощью редактора, запоминаются и показываются в журнале в формате ed. Строки, начинающиеся символом "<", удалены, а строки, начинающиеся символом ">" -- добавлены.
$ vi ~/.bashrc
|
Для того чтобы изменить файл в соответствии с показанными в диффшоте изменениями, можно воспользоваться командой patch. Нужно скопировать изменения, запустить программу patch, указав в качестве её аргумента файл, к которому применяются изменения, и всавить скопированный текст:
$ patch ~/.bashrc |
Для того чтобы получить краткую справочную информацию о команде, нужно подвести к ней мышь. Во всплывающей подсказке появится краткое описание команды.
Если справочная информация о команде есть, команда выделяется голубым фоном, например: vi. Если справочная информация отсутствует, команда выделяется розовым фоном, например: notepad.exe. Справочная информация может отсутствовать в том случае, если (1) команда введена неверно; (2) если распознавание команды LiLaLo выполнено неверно; (3) если информация о команде неизвестна LiLaLo. Последнее возможно для редких команд.
Большие, в особенности многострочные, всплывающие подсказки лучше всего показываются браузерами KDE Konqueror, Apple Safari и Microsoft Internet Explorer. В браузерах Mozilla и Firefox они отображаются не полностью, а вместо перевода строки выводится специальный символ.
Время ввода команды, показанное в журнале, соответствует времени начала ввода командной строки, которое равно тому моменту, когда на терминале появилось приглашение интерпретатора
Имя терминала, на котором была введена команда, показано в специальном блоке. Этот блок показывается только в том случае, если терминал текущей команды отличается от терминала предыдущей.
Вывод не интересующих вас в настоящий момент элементов журнала, таких как время, имя терминала и других, можно отключить. Для этого нужно воспользоваться формой управления журналом вверху страницы.
Небольшие комментарии к командам можно вставлять прямо из командной строки. Комментарий вводится прямо в командную строку, после символов #^ или #v. Символы ^ и v показывают направление выбора команды, к которой относится комментарий: ^ - к предыдущей, v - к следующей. Например, если в командной строке было введено:
$ whoami
user
$ #^ Интересно, кто я?в журнале это будет выглядеть так:
$ whoami
user
| Интересно, кто я? |
Если комментарий содержит несколько строк, его можно вставить в журнал следующим образом:
$ whoami
user
$ cat > /dev/null #^ Интересно, кто я?
Программа whoami выводит имя пользователя, под которым мы зарегистрировались в системе. - Она не может ответить на вопрос о нашем назначении в этом мире.В журнале это будет выглядеть так:
$ whoami user
|
Комментарии, не относящиеся непосредственно ни к какой из команд, добавляются точно таким же способом, только вместо симолов #^ или #v нужно использовать символы #=
1
2
3
4
Группы команд, выполненных на разных терминалах, разделяются специальной линией.
Под этой линией в правом углу показано имя терминала, на котором выполнялись команды.
Для того чтобы посмотреть команды только одного сенса,
нужно щёкнуть по этому названию.
LiLaLo (L3) расшифровывается как Live Lab Log.
Программа разработана для повышения эффективности обучения Unix/Linux-системам.
(c) Игорь Чубин, 2004-2008