Skip to content

Firewall diagnostics

Detailed insight into loaded aliases and their content. When an alias has Statistics enabled, it will show these too.

Updated View as Markdown

Aliases

Detailed insight into loaded aliases and their content. When an alias has Statistics enabled, it will show these too.

It’s also possible to manually adjust the contents, using Quick add address or the delete button.

Sessions

Utilises pftop to offer a detailed view on the active sessions and their traffic counters.

The following fields are available in the grid:


Dir Direction (in -\> or out or out__)
LISTEN Represents waiting for a connection request from any remote TCP and port.
SYN_SENT Represents waiting for a matching connection request after having sent a connection request.
SYN_RCVD Represents waiting for a confirming connection request acknowledgment after having both received and sent a connection request.
ESTABLISHED Represents an open connection, data received can be delivered to the user. The normal state for the data transfer phase of the connection.
FIN_WAIT_1 Represents waiting for a connection termination request from the remote TCP, or an acknowledgment of the connection termination request previously sent.
FIN_WAIT_2 Represents waiting for a connection termination request from the remote TCP.
CLOSE_WAIT Represents waiting for a connection termination request from the local user.
CLOSING Represents waiting for a connection termination request acknowledgment from the remote TCP.
LAST_ACK Represents waiting for an acknowledgment of the connection termination request previously sent to the remote TCP (which includes an acknowledgment of its connection termination request).
TIME_WAIT Represents waiting for enough time to pass to be sure the remote TCP received the acknowledgment of its connection termination request.
CLOSED Represents no connection state at all

List of available UDP/Other states (man pf.conf(5))

NO_TRAFFIC No traffic for this direction
SINGLE The state if the source host sends more than one packet but the destination host has never sent one back.
MULTIPLE The state if both hosts have sent packets.

Statistics

Various detailed statistics gathered from pfctl, such as packet counters per interface, memory limits, configured timeouts and detailed active rules.

Navigation

Type to search…

↑↓ navigate↵ selectEsc close