Re: CVS commit: src/sys/net/npf

Emmanuel Nyarko <[email protected]> writes:

>>  I'm not
>>    saying they have to be there, but there should be some amount of
>>    counters for the various things that can happen, accessible somehow.
>>    This became obvious when I ran into the 'all traffic blocked' bug
>>    and I could not find a counter for blocked output packets.
>
> npfctl stats???
>
> i used npfctl stats and i saw the default blocks which helped me to solve the issue.

Sorry, I missed that.  I scanned the output from npfctl on the left and
didn't realize the first line had 5 separate verbs.  I'm going to say
that's my fault and it's ok.

It would probably be good to improve granularity, perhaps in/out to
start with, and "ether" probably should be layer-2 to be consistent.