pf: allow pflow to be activated per rule
authorKristof Provost <kp@FreeBSD.org>
Fri, 1 Dec 2023 13:55:50 +0000 (14:55 +0100)
committerKristof Provost <kp@FreeBSD.org>
Tue, 16 Jan 2024 08:45:54 +0000 (09:45 +0100)
commitbaf9b6d04205e02e6248377b1e13b33059a35fc9
tree5f503d83bc69369e3552cf036df44fc89528b571
parent5dea523bd241fea07dc28c067b124d607dc96948
pf: allow pflow to be activated per rule

Only generate ipfix/netflow reports (through pflow) for the rules where
this is enabled. Reports can also be enabled globally through 'set
state-default pflow'.

Obtained from: OpenBSD
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D43108
sbin/pfctl/parse.y
sbin/pfctl/pf_print_state.c
sbin/pfctl/pfctl_parser.c
share/man/man5/pf.conf.5
sys/net/pflow.h
sys/net/pfvar.h
sys/netpfil/pf/pf.c
sys/netpfil/pf/pf.h
sys/netpfil/pf/pf_ioctl.c
sys/netpfil/pf/pflow.c