IPFW questions (log fragments, ipfw show)

[Beat Siegenthaler]

Hi,

i cannot find info about following two points, maybe somebody can shed a
light on that:

ipfw show:
63000 56 28136 Wed May 2 22:51:43 2018 allow udp from any to me6
53,123 recv gif0 keep-state :default

what says ":default" at the end? Only on rules with keep-alive. I do not
remember to see this some months ago.

ipfw logging:

May 2 22:48:36 myhost kernel: ipfw: 65100 Deny UDP [2001:470:1a::1]
[2001:xxxx:xxxx:xxxx::x] in via gif0 (frag ab0a815c:***@9856)
May 2 22:48:36 myhost kernel: ipfw: 65100 Deny UDP [2001:470:1a::1]
[2001:xxxx:xxxx:xxxx::x] in via gif0 (frag d52823ef:***@9856)
May 2 22:48:37 myhost kernel: ipfw: 65100 Deny UDP [2001:500:48::1]
[2001:xxxx:xxxx:xxxx::x] in via gif0 (frag dad5be95:***@9856)
May 2 22:48:38 myhost kernel: ipfw: 65100 Deny UDP [2001:5a0:10::1]
[2001:xxxx:xxxx:xxxx::x] in via gif0 (frag e9d303a0:***@9856)
May 2 22:48:38 myhost kernel: ipfw: 65100 Deny UDP [2001:5a0:10::1]
[2001:xxxx:xxxx:xxxx::x] in via gif0 (frag d35fff84:***@9856)

what encodes frag info? (frag d35fff84:***@9856)

thanks

[Sebastian Schwarz]

Post by Beat Siegenthaler
63000 56 28136 Wed May 2 22:51:43 2018 allow udp from any to me6
53,123 recv gif0 keep-state :default
what says ":default" at the end? Only on rules with keep-alive. I do not
remember to see this some months ago.

This is the flow name. If not explicitly specified it is
":default". The change was released with 11.1:

- https://www.freebsd.org/releases/11.1R/relnotes.html#kernel-modules
- https://svnweb.freebsd.org/base?view=revision&revision=316274
- https://reviews.freebsd.org/D6674