START sys/net/pflog 2024-06-26T04:33:25Z ==== busy-rdomains ==== # Check if rdomains are busy. ==== ifconfig ==== sleep 2 # XXX pkill -f '^/usr/sbin/tcpdump -l -e -vvv -s 2048 -ni' *** Error 1 in target 'stamp-stop' (ignored) rm -f stamp-bpf* # Destroy interfaces. /sbin/ifconfig lo11 rdomain 11 /sbin/ifconfig lo11 inet 169.254.0.1 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet6 fc00::1 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet 169.254.0.2 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet6 fc00::2 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet 169.254.0.3 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet6 fc00::3 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet 169.254.0.4 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet6 fc00::4 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet 169.254.0.5 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet6 fc00::5 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet 169.254.0.6 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet6 fc00::6 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet 169.254.0.11 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet6 fc00::11 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet 169.254.0.12 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet6 fc00::12 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet 169.254.0.14 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet6 fc00::14 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet 169.254.0.21 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet6 fc00::21 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet 169.254.0.22 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet6 fc00::22 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet 169.254.0.23 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet6 fc00::23 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet 169.254.0.24 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet6 fc00::24 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet 127.0.0.1 delete ifconfig: SIOCDIFADDR: Can't assign requested address *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 inet6 ::1 delete /sbin/ifconfig pflog11 destroy ifconfig: pflog11: SIOCIFDESTROY: Device not configured *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig pflog12 destroy ifconfig: pflog12: SIOCIFDESTROY: Device not configured *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig pflog13 destroy ifconfig: pflog13: SIOCIFDESTROY: Device not configured *** Error 1 in target 'unconfig' (ignored) /sbin/ifconfig lo11 destroy rm -f stamp-ifconfig # Create and configure pflog and loopback interfaces. /sbin/ifconfig pflog11 create /sbin/ifconfig pflog12 create /sbin/ifconfig pflog13 create /sbin/ifconfig lo11 rdomain 11 /sbin/ifconfig lo11 inet 127.0.0.1/8 /sbin/ifconfig lo11 inet6 ::1/128 /sbin/ifconfig lo11 inet 169.254.0.1/32 alias /sbin/ifconfig lo11 inet6 fc00::1/128 /sbin/ifconfig lo11 inet 169.254.0.2/32 alias /sbin/ifconfig lo11 inet6 fc00::2/128 /sbin/ifconfig lo11 inet 169.254.0.3/32 alias /sbin/ifconfig lo11 inet6 fc00::3/128 /sbin/ifconfig lo11 inet 169.254.0.4/32 alias /sbin/ifconfig lo11 inet6 fc00::4/128 /sbin/ifconfig lo11 inet 169.254.0.5/32 alias /sbin/ifconfig lo11 inet6 fc00::5/128 /sbin/ifconfig lo11 inet 169.254.0.6/32 alias /sbin/ifconfig lo11 inet6 fc00::6/128 /sbin/ifconfig lo11 inet 169.254.0.11/32 alias /sbin/ifconfig lo11 inet6 fc00::11/128 /sbin/ifconfig lo11 inet 169.254.0.12/32 alias /sbin/ifconfig lo11 inet6 fc00::12/128 /sbin/ifconfig lo11 inet 169.254.0.14/32 alias /sbin/ifconfig lo11 inet6 fc00::14/128 /sbin/ifconfig lo11 inet 169.254.0.21/32 alias /sbin/ifconfig lo11 inet6 fc00::21/128 /sbin/ifconfig lo11 inet 169.254.0.22/32 alias /sbin/ifconfig lo11 inet6 fc00::22/128 /sbin/ifconfig lo11 inet 169.254.0.23/32 alias /sbin/ifconfig lo11 inet6 fc00::23/128 /sbin/ifconfig lo11 inet 169.254.0.24/32 alias /sbin/ifconfig lo11 inet6 fc00::24/128 # Wait until IPv6 addresses are no longer tentative. for i in `jot 50`; do if ! { /sbin/ifconfig pair11; /sbin/ifconfig pair12; /sbin/ifconfig lo13; } | fgrep -q tentative; then break; fi; sleep .1; done pair11: no such interface pair12: no such interface lo13: no such interface ! { /sbin/ifconfig pair11; /sbin/ifconfig pair12; /sbin/ifconfig lo13; } | fgrep tentative pair11: no such interface pair12: no such interface lo13: no such interface ==== pfctl ==== # Create python include file containing the addresses. rm -f addr.py addr.py.tmp echo 'N="11"' >>addr.py.tmp echo 'LO="lo11"' >>addr.py.tmp echo 'N1="11"' >>addr.py.tmp echo 'PFLOG_N1="pflog11"' >>addr.py.tmp echo 'N2="12"' >>addr.py.tmp echo 'PFLOG_N2="pflog12"' >>addr.py.tmp echo 'N3="13"' >>addr.py.tmp echo 'PFLOG_N3="pflog13"' >>addr.py.tmp mv addr.py.tmp addr.py # Load the pf rules into the kernel. cat addr.py /usr/src/regress/sys/net/pflog/pf.conf | /sbin/pfctl -n -f - cat addr.py /usr/src/regress/sys/net/pflog/pf.conf | /sbin/pfctl -a regress -f - ==== run-ping-1 ==== rm -f pflog11.tcpdump pkill -f '^/usr/sbin/tcpdump -l -e -vvv -s 2048 -ni pflog11' || true /usr/sbin/tcpdump -l -e -vvv -s 2048 -ni pflog11 >pflog11.tcpdump & rm -f stamp-stop rm -f pflog12.tcpdump pkill -f '^/usr/sbin/tcpdump -l -e -vvv -s 2048 -ni pflog12' || true /usr/sbin/tcpdump -l -e -vvv -s 2048 -ni pflog12 >pflog12.tcpdump & rm -f stamp-stop tcpdump: listening on pflog11, link-type PFLOG rm -f pflog13.tcpdump pkill -f '^/usr/sbin/tcpdump -l -e -vvv -s 2048 -ni pflog13' || true /usr/sbin/tcpdump -l -e -vvv -s 2048 -ni pflog13 >pflog13.tcpdump & rm -f stamp-stop sleep 2 # XXX tcpdump: listening on pflog12, link-type PFLOG tcpdump: listening on pflog13, link-type PFLOG /sbin/ping -n -w 1 -c 1 -V 11 169.254.0.1 PING 169.254.0.1 (169.254.0.1): 56 data bytes 64 bytes from 169.254.0.1: icmp_seq=0 ttl=255 time=0.366 ms --- 169.254.0.1 ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.366/0.366/0.366/0.000 ms ==== run-ping6-1 ==== /sbin/ping6 -n -w 1 -c 1 -V 11 fc00::1 PING fc00::1 (fc00::1): 56 data bytes 64 bytes from fc00::1: icmp_seq=0 hlim=64 time=0.417 ms --- fc00::1 ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.417/0.417/0.417/0.000 ms ==== run-udp-1 ==== # ignore errors, just send packet fast echo foo | nc -u -w 1 -V 11 169.254.0.1 discard & ==== run-udp6-1 ==== # ignore errors, just send packet fast echo foo | nc -u -w 1 -V 11 fc00::1 discard & ==== run-ping-2 ==== /sbin/ping -n -w 1 -c 1 -V 11 169.254.0.2 PING 169.254.0.2 (169.254.0.2): 56 data bytes 64 bytes from 169.254.0.2: icmp_seq=0 ttl=255 time=0.350 ms --- 169.254.0.2 ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.350/0.350/0.350/0.000 ms ==== run-ping6-2 ==== /sbin/ping6 -n -w 1 -c 1 -V 11 fc00::2 PING fc00::2 (fc00::2): 56 data bytes 64 bytes from fc00::2: icmp_seq=0 hlim=64 time=0.445 ms --- fc00::2 ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.445/0.445/0.445/0.000 ms ==== run-udp-2 ==== # ignore errors, just send packet fast echo foo | nc -u -w 1 -V 11 169.254.0.2 discard & ==== run-udp6-2 ==== # ignore errors, just send packet fast echo foo | nc -u -w 1 -V 11 fc00::2 discard & ==== run-ping-3 ==== /sbin/ping -n -w 1 -c 1 -V 11 169.254.0.3 PING 169.254.0.3 (169.254.0.3): 56 data bytes 64 bytes from 169.254.0.3: icmp_seq=0 ttl=255 time=0.347 ms --- 169.254.0.3 ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.347/0.347/0.347/0.000 ms ==== run-ping6-3 ==== /sbin/ping6 -n -w 1 -c 1 -V 11 fc00::3 PING fc00::3 (fc00::3): 56 data bytes 64 bytes from fc00::3: icmp_seq=0 hlim=64 time=0.428 ms --- fc00::3 ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.428/0.428/0.428/0.000 ms ==== run-udp-3 ==== # ignore errors, just send packet fast echo foo | nc -u -w 1 -V 11 169.254.0.3 discard & ==== run-udp6-3 ==== # ignore errors, just send packet fast echo foo | nc -u -w 1 -V 11 fc00::3 discard & ==== run-ping-4 ==== /sbin/ping -n -w 1 -c 1 -V 11 169.254.0.4 PING 169.254.0.4 (169.254.0.4): 56 data bytes 64 bytes from 169.254.0.4: icmp_seq=0 ttl=255 time=0.343 ms --- 169.254.0.4 ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.343/0.343/0.343/0.000 ms ==== run-ping6-4 ==== /sbin/ping6 -n -w 1 -c 1 -V 11 fc00::4 PING fc00::4 (fc00::4): 56 data bytes 64 bytes from fc00::4: icmp_seq=0 hlim=64 time=0.429 ms --- fc00::4 ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.429/0.429/0.429/0.000 ms ==== run-udp-4 ==== # ignore errors, just send packet fast echo foo | nc -u -w 1 -V 11 169.254.0.4 discard & ==== run-udp6-4 ==== # ignore errors, just send packet fast echo foo | nc -u -w 1 -V 11 fc00::4 discard & ==== run-ping-5 ==== /sbin/ping -n -w 1 -c 1 -V 11 169.254.0.5 PING 169.254.0.5 (169.254.0.5): 56 data bytes 64 bytes from 169.254.0.5: icmp_seq=0 ttl=255 time=0.351 ms --- 169.254.0.5 ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.351/0.351/0.351/0.000 ms ==== run-ping6-5 ==== /sbin/ping6 -n -w 1 -c 1 -V 11 fc00::5 PING fc00::5 (fc00::5): 56 data bytes 64 bytes from fc00::5: icmp_seq=0 hlim=64 time=0.434 ms --- fc00::5 ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.434/0.434/0.434/0.000 ms ==== run-udp-5 ==== # ignore errors, just send packet fast echo foo | nc -u -w 1 -V 11 169.254.0.5 discard & ==== run-udp6-5 ==== # ignore errors, just send packet fast echo foo | nc -u -w 1 -V 11 fc00::5 discard & ==== run-ping-6 ==== /sbin/ping -n -w 1 -c 1 -V 11 169.254.0.6 PING 169.254.0.6 (169.254.0.6): 56 data bytes 64 bytes from 169.254.0.6: icmp_seq=0 ttl=255 time=0.340 ms --- 169.254.0.6 ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.340/0.340/0.340/0.000 ms ==== run-ping6-6 ==== /sbin/ping6 -n -w 1 -c 1 -V 11 fc00::6 PING fc00::6 (fc00::6): 56 data bytes 64 bytes from fc00::6: icmp_seq=0 hlim=64 time=0.425 ms --- fc00::6 ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.425/0.425/0.425/0.000 ms ==== run-udp-6 ==== # ignore errors, just send packet fast echo foo | nc -u -w 1 -V 11 169.254.0.6 discard & ==== run-udp6-6 ==== # ignore errors, just send packet fast echo foo | nc -u -w 1 -V 11 fc00::6 discard & ==== run-ping-11 ==== /sbin/ping -n -w 1 -c 1 -V 11 169.254.0.11 PING 169.254.0.11 (169.254.0.11): 56 data bytes 64 bytes from 169.254.0.11: icmp_seq=0 ttl=255 time=0.358 ms --- 169.254.0.11 ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.358/0.358/0.358/0.000 ms ==== run-ping6-11 ==== /sbin/ping6 -n -w 1 -c 1 -V 11 fc00::11 PING fc00::11 (fc00::11): 56 data bytes 64 bytes from fc00::11: icmp_seq=0 hlim=64 time=0.468 ms --- fc00::11 ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.468/0.468/0.468/0.000 ms ==== run-udp-11 ==== # ignore errors, just send packet fast echo foo | nc -u -w 1 -V 11 169.254.0.11 discard & ==== run-udp6-11 ==== # ignore errors, just send packet fast echo foo | nc -u -w 1 -V 11 fc00::11 discard & ==== run-ping-12 ==== /sbin/ping -n -w 1 -c 1 -V 11 169.254.0.12 PING 169.254.0.12 (169.254.0.12): 56 data bytes 64 bytes from 169.254.0.12: icmp_seq=0 ttl=255 time=0.361 ms --- 169.254.0.12 ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.361/0.361/0.361/0.000 ms ==== run-ping6-12 ==== /sbin/ping6 -n -w 1 -c 1 -V 11 fc00::12 PING fc00::12 (fc00::12): 56 data bytes 64 bytes from fc00::12: icmp_seq=0 hlim=64 time=0.449 ms --- fc00::12 ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.449/0.449/0.449/0.000 ms ==== run-udp-12 ==== # ignore errors, just send packet fast echo foo | nc -u -w 1 -V 11 169.254.0.12 discard & ==== run-udp6-12 ==== # ignore errors, just send packet fast echo foo | nc -u -w 1 -V 11 fc00::12 discard & ==== run-ping-14 ==== /sbin/ping -n -w 1 -c 1 -V 11 169.254.0.14 PING 169.254.0.14 (169.254.0.14): 56 data bytes 64 bytes from 169.254.0.14: icmp_seq=0 ttl=63 time=0.496 ms --- 169.254.0.14 ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.496/0.496/0.496/0.000 ms ==== run-ping6-14 ==== /sbin/ping6 -n -w 1 -c 1 -V 11 fc00::14 PING fc00::14 (fc00::14): 56 data bytes 64 bytes from fc00::14: icmp_seq=0 hlim=63 time=0.534 ms --- fc00::14 ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.534/0.534/0.534/0.000 ms ==== run-udp-14 ==== # ignore errors, just send packet fast echo foo | nc -u -w 1 -V 11 169.254.0.14 discard & ==== run-udp6-14 ==== # ignore errors, just send packet fast echo foo | nc -u -w 1 -V 11 fc00::14 discard & ==== run-ping6-0 ==== /sbin/ping6 -n -w 1 -c 1 -V 11 ::1 PING ::1 (::1): 56 data bytes 64 bytes from ::1: icmp_seq=0 hlim=64 time=0.430 ms --- ::1 ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.430/0.430/0.430/0.000 ms ==== run-udp6-0 ==== echo foo | nc -u -w 1 -V 11 ::1 discard ==== run-bpf-11 ==== sleep 2 # XXX pkill -f '^/usr/sbin/tcpdump -l -e -vvv -s 2048 -ni' 88 packets received by filter 0 packets dropped by kernel 0 packets received by filter 0 packets dropped by kernel 80 packets received by filter 0 packets dropped by kernel rm -f stamp-bpf* # show full logs cat pflog11.tcpdump 06:33:32.624108 rule 5.regress.3/(match) [uid 0, pid 77559] pass out on lo11: 169.254.0.1 > 169.254.0.1: icmp: echo request (id:00f0 seq:0) [icmp cksum ok] (ttl 255, id 35540, len 84, bad ip cksum 7564! -> dcd5) 06:33:32.624202 rule 5.regress.3/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.1 > 169.254.0.1: icmp: echo request (id:00f0 seq:0) [icmp cksum ok] (ttl 255, id 35540, len 84, bad ip cksum 0! -> dcd5) 06:33:32.624269 rule 5.regress.3/(match) [uid 0, pid 77559] pass out on lo11: 169.254.0.1 > 169.254.0.1: icmp: echo reply (id:00f0 seq:0) [bad icmp cksum 0! -> 746d] (ttl 255, id 52146, len 84, bad ip cksum 0! -> 9bf7) 06:33:32.624291 rule 5.regress.3/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.1 > 169.254.0.1: icmp: echo reply (id:00f0 seq:0) [icmp cksum ok] (ttl 255, id 52146, len 84, bad ip cksum 0! -> 9bf7) 06:33:32.881807 rule 5.regress.11/(match) [uid 0, pid 77559] pass out on lo11: fc00::1 > fc00::1: icmp6: echo request (id:7a1d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:32.881907 rule 5.regress.11/(match) [uid 0, pid 77559] pass in on lo11: fc00::1 > fc00::1: icmp6: echo request (id:7a1d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:32.882000 rule 5.regress.11/(match) [uid 0, pid 77559] pass out on lo11: fc00::1 > fc00::1: icmp6: echo reply (id:7a1d seq:0) [bad icmp6 cksum 0! -> 1ee6] (len 64, hlim 64) 06:33:32.882026 rule 5.regress.11/(match) [uid 0, pid 77559] pass in on lo11: fc00::1 > fc00::1: icmp6: echo reply (id:7a1d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:33.154723 rule 5.regress.3/(match) [uid 0, pid 77559] pass out on lo11: 169.254.0.1.26221 > 169.254.0.1.9: [bad udp cksum 00d6! -> 6fe7] udp 4 (ttl 64, id 65318, len 32, bad ip cksum c! -> 27a8) 06:33:33.154781 rule 5.regress.3/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.1.26221 > 169.254.0.1.9: [bad udp cksum 541c! -> 6fe7] udp 4 (ttl 64, id 65318, len 32, bad ip cksum 0! -> 27a8) 06:33:33.154842 rule 5.regress.3/(match) [uid 0, pid 77559] pass out on lo11: 169.254.0.1 > 169.254.0.1: icmp: 169.254.0.1 udp port 9 unreachable [bad icmp cksum 0! -> 6a06] for 169.254.0.1.26221 > 169.254.0.1.9: udp 4 (ttl 64, id 65318, len 32, bad ip cksum 0! -> 27a8) (ttl 255, id 14733, len 56, bad ip cksum 94e3! -> 2e39) 06:33:33.154863 rule 5.regress.3/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.1 > 169.254.0.1: icmp: 169.254.0.1 udp port 9 unreachable [icmp cksum ok] for 169.254.0.1.26221 > 169.254.0.1.9: udp 4 (ttl 64, id 65318, len 32, bad ip cksum 0! -> 27a8) (ttl 255, id 14733, len 56, bad ip cksum 0! -> 2e39) 06:33:33.416156 rule 5.regress.11/(match) [uid 0, pid 77559] pass out on lo11: fc00::1.39616 > fc00::1.9: [invalid udp cksum 0] udp 4 [flowlabel 0x393de] (len 12, hlim 64) 06:33:33.416215 rule 5.regress.11/(match) [uid 0, pid 77559] pass in on lo11: fc00::1.39616 > fc00::1.9: [bad udp cksum f820! -> 978f] udp 4 [flowlabel 0x393de] (len 12, hlim 64) 06:33:33.416282 rule 5.regress.11/(match) [uid 0, pid 77559] pass out on lo11: fc00::1 > fc00::1: icmp6: fc00::1 udp port 9 unreachable [bad icmp6 cksum 0! -> a0df] (len 60, hlim 64) 06:33:33.416303 rule 5.regress.11/(match) [uid 0, pid 77559] pass in on lo11: fc00::1 > fc00::1: icmp6: fc00::1 udp port 9 unreachable [icmp6 cksum ok] (len 60, hlim 64) 06:33:33.678246 rule 5.regress.4/(match) [uid 0, pid 77559] pass out on lo11: 169.254.0.2 > 169.254.0.2: icmp: echo request (id:3d76 seq:0) [icmp cksum ok] (ttl 255, id 3250, len 84, bad ip cksum 2f2! -> 5af6) 06:33:33.678356 rule 5.regress.4/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.2 > 169.254.0.2: icmp: echo request (id:3d76 seq:0) [icmp cksum ok] (ttl 255, id 3250, len 84, bad ip cksum 0! -> 5af6) 06:33:33.935862 rule 5.regress.12/(match) [uid 0, pid 77559] pass out on lo11: fc00::2 > fc00::2: icmp6: echo request (id:e4c4 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:33.935976 rule 5.regress.12/(match) [uid 0, pid 77559] pass in on lo11: fc00::2 > fc00::2: icmp6: echo request (id:e4c4 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:34.238598 rule 5.regress.4/(match) [uid 0, pid 77559] pass out on lo11: 169.254.0.2.31853 > 169.254.0.2.9: [bad udp cksum 2e2d! -> 59e5] udp 4 (ttl 64, id 10194, len 32, bad ip cksum c! -> fefa) 06:33:34.238667 rule 5.regress.4/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.2.31853 > 169.254.0.2.9: [bad udp cksum 541e! -> 59e5] udp 4 (ttl 64, id 10194, len 32, bad ip cksum 0! -> fefa) 06:33:34.501545 rule 5.regress.12/(match) [uid 0, pid 77559] pass out on lo11: fc00::2.11492 > fc00::2.9: [invalid udp cksum 0] udp 4 [flowlabel 0x5d732] (len 12, hlim 64) 06:33:34.501621 rule 5.regress.12/(match) [uid 0, pid 77559] pass in on lo11: fc00::2.11492 > fc00::2.9: [bad udp cksum f822! -> 056a] udp 4 [flowlabel 0x5d732] (len 12, hlim 64) 06:33:34.738800 rule 5.regress.5/(match) [uid 0, pid 77559] pass out on lo11: 169.254.0.3 > 169.254.0.3: icmp: echo request (id:18b2 seq:0) [icmp cksum ok] (ttl 255, id 63167, len 84, bad ip cksum 80a! -> 70e6) 06:33:34.738906 rule 5.regress.5/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.3 > 169.254.0.3: icmp: echo request (id:18b2 seq:0) [icmp cksum ok] (ttl 255, id 63167, len 84, bad ip cksum 0! -> 70e6) 06:33:34.738979 rule 5/(match) [uid 0, pid 77559] pass out on lo11: 169.254.0.3 > 169.254.0.3: icmp: echo reply (id:18b2 seq:0) [bad icmp cksum 0! -> 1063] (ttl 255, id 19082, len 84, bad ip cksum 0! -> 1d1c) 06:33:34.738994 rule 5/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.3 > 169.254.0.3: icmp: echo reply (id:18b2 seq:0) [icmp cksum ok] (ttl 255, id 19082, len 84, bad ip cksum 0! -> 1d1c) 06:33:34.998438 rule 5.regress.13/(match) [uid 0, pid 77559] pass out on lo11: fc00::3 > fc00::3: icmp6: echo request (id:130d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:34.998550 rule 5.regress.13/(match) [uid 0, pid 77559] pass in on lo11: fc00::3 > fc00::3: icmp6: echo request (id:130d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:34.998652 rule 5/(match) [uid 0, pid 77559] pass out on lo11: fc00::3 > fc00::3: icmp6: echo reply (id:130d seq:0) [bad icmp6 cksum 0! -> 43be] (len 64, hlim 64) 06:33:34.998669 rule 5/(match) [uid 0, pid 77559] pass in on lo11: fc00::3 > fc00::3: icmp6: echo reply (id:130d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:35.275768 rule 5.regress.5/(match) [uid 0, pid 77559] pass out on lo11: 169.254.0.3.23895 > 169.254.0.3.9: [bad udp cksum 0040! -> 78f9] udp 4 (ttl 64, id 37320, len 32, bad ip cksum c! -> 9502) 06:33:35.275882 rule 5.regress.5/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.3.23895 > 169.254.0.3.9: [bad udp cksum 5420! -> 78f9] udp 4 (ttl 64, id 37320, len 32, bad ip cksum 0! -> 9502) 06:33:35.275976 rule 5/(match) [uid 0, pid 77559] pass out on lo11: 169.254.0.3 > 169.254.0.3: icmp: 169.254.0.3 udp port 9 unreachable [bad icmp cksum 0! -> e072] for 169.254.0.3.23895 > 169.254.0.3.9: udp 4 (ttl 64, id 37320, len 32, bad ip cksum 0! -> 9502) (ttl 255, id 57606, len 56, bad ip cksum a16e! -> 86bb) 06:33:35.275993 rule 5/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.3 > 169.254.0.3: icmp: 169.254.0.3 udp port 9 unreachable [icmp cksum ok] for 169.254.0.3.23895 > 169.254.0.3.9: udp 4 (ttl 64, id 37320, len 32, bad ip cksum 0! -> 9502) (ttl 255, id 57606, len 56, bad ip cksum 0! -> 86bb) 06:33:35.535963 rule 5.regress.13/(match) [uid 0, pid 77559] pass out on lo11: fc00::3.13390 > fc00::3.9: [invalid udp cksum 0] udp 4 [flowlabel 0x43593] (len 12, hlim 64) 06:33:35.536045 rule 5.regress.13/(match) [uid 0, pid 77559] pass in on lo11: fc00::3.13390 > fc00::3.9: [bad udp cksum f824! -> fdfd] udp 4 [flowlabel 0x43593] (len 12, hlim 64) 06:33:35.536113 rule 5/(match) [uid 0, pid 77559] pass out on lo11: fc00::3 > fc00::3: icmp6: fc00::3 udp port 9 unreachable [bad icmp6 cksum 0! -> 6590] (len 60, hlim 64) 06:33:35.536127 rule 5/(match) [uid 0, pid 77559] pass in on lo11: fc00::3 > fc00::3: icmp6: fc00::3 udp port 9 unreachable [icmp6 cksum ok] (len 60, hlim 64) 06:33:35.780404 rule 5.regress.6/(match) [uid 0, pid 77559] pass out on lo11: 169.254.0.4 > 169.254.0.4: icmp: echo request (id:c2d5 seq:0) [icmp cksum ok] (ttl 255, id 9590, len 84, bad ip cksum 80a! -> 422e) 06:33:35.780509 rule 5.regress.6/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.4 > 169.254.0.4: icmp: echo request (id:c2d5 seq:0) [icmp cksum ok] (ttl 255, id 9590, len 84, bad ip cksum 0! -> 422e) 06:33:36.036671 rule 5.regress.14/(match) [uid 0, pid 77559] pass out on lo11: fc00::4 > fc00::4: icmp6: echo request (id:207d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:36.036789 rule 5.regress.14/(match) [uid 0, pid 77559] pass in on lo11: fc00::4 > fc00::4: icmp6: echo request (id:207d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:36.323130 rule 5.regress.6/(match) [uid 0, pid 77559] pass out on lo11: [uid 0, pid 94589] 169.254.0.4.40760 > 169.254.0.4.9: [bad udp cksum 00b8! -> 3716] udp 4 (ttl 64, id 30065, len 32, bad ip cksum c! -> b157) 06:33:36.323204 rule 5.regress.6/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.4.40760 > 169.254.0.4.9: [bad udp cksum 5422! -> 3716] udp 4 (ttl 64, id 30065, len 32, bad ip cksum 0! -> b157) 06:33:36.571607 rule 5.regress.14/(match) [uid 0, pid 77559] pass out on lo11: [uid 0, pid 88431] fc00::4.2403 > fc00::4.9: [invalid udp cksum 0] udp 4 [flowlabel 0x21657] (len 12, hlim 64) 06:33:36.571684 rule 5.regress.14/(match) [uid 0, pid 77559] pass in on lo11: fc00::4.2403 > fc00::4.9: [bad udp cksum f826! -> 28e7] udp 4 [flowlabel 0x21657] (len 12, hlim 64) 06:33:38.897462 rule 5.regress.18/(match) [uid 0, pid 77559] pass out on lo11: [rewritten: src 169.254.0.11:21812, dst 169.254.0.21:8] 169.254.0.11 > 169.254.0.11: icmp: echo request (id:5534 seq:0) [icmp cksum ok] (ttl 255, id 5303, len 84, bad ip cksum 9! -> 52df) 06:33:38.897578 rule 5.regress.2/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.11 > 169.254.0.21: icmp: echo request (id:5534 seq:0) [icmp cksum ok] (ttl 255, id 5303, len 84, bad ip cksum 0! -> 52d5) 06:33:39.173861 rule 5.regress.20/(match) [uid 0, pid 77559] pass out on lo11: [rewritten: src fc00::11:12231, dst fc00::21:128] fc00::11 > fc00::11: icmp6: echo request (id:2fc7 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:39.174006 rule 5.regress.10/(match) [uid 0, pid 77559] pass in on lo11: fc00::11 > fc00::21: icmp6: echo request (id:2fc7 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:39.464977 rule 5.regress.18/(match) [uid 0, pid 77559] pass out on lo11: [rewritten: src 169.254.0.11:23042, dst 169.254.0.21:9] 169.254.0.11.23042 > 169.254.0.11.9: [bad udp cksum 0001! -> 7c3e] udp 4 (ttl 64, id 63912, len 32, bad ip cksum c! -> 2d12) 06:33:39.465062 rule 5.regress.2/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.11.23042 > 169.254.0.21.9: [bad udp cksum 543a! -> 7c34] udp 4 (ttl 64, id 63912, len 32, bad ip cksum 0! -> 2d08) 06:33:39.724577 rule 5.regress.20/(match) [uid 0, pid 77559] pass out on lo11: [rewritten: src fc00::11:36283, dst fc00::21:9] fc00::11.36283 > fc00::11.9: [invalid udp cksum 0] udp 4 [flowlabel 0x7e36] (len 12, hlim 64) 06:33:39.724670 rule 5.regress.10/(match) [uid 0, pid 77559] pass in on lo11: fc00::11.36283 > fc00::21.9: [bad udp cksum f850! -> a464] udp 4 [flowlabel 0x7e36] (len 12, hlim 64) 06:33:39.959666 rule 5.regress.19/(match) [uid 0, pid 77559] pass out on lo11: [rewritten: src 169.254.0.22:51579, dst 169.254.0.12:8] 169.254.0.12 > 169.254.0.12: icmp: echo request (id:8cd2 seq:0) [icmp cksum ok] (ttl 255, id 10980, len 84, bad ip cksum 80a! -> 3cb0) 06:33:39.959779 rule 5.regress.2/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.22 > 169.254.0.12: icmp: echo request (id:c97b seq:0) [icmp cksum ok] (ttl 255, id 10980, len 84, bad ip cksum 0! -> 3ca6) 06:33:40.216088 rule 5.regress.21/(match) [uid 0, pid 77559] pass out on lo11: [rewritten: src fc00::22:38641, dst fc00::12:128] fc00::12 > fc00::12: icmp6: echo request (id:e58c seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:40.216212 rule 5.regress.10/(match) [uid 0, pid 77559] pass in on lo11: fc00::22 > fc00::12: icmp6: echo request (id:96f1 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:40.488622 rule 5.regress.19/(match) [uid 0, pid 77559] pass out on lo11: [rewritten: src 169.254.0.22:54822, dst 169.254.0.12:9] 169.254.0.12.29724 > 169.254.0.12.9: [bad udp cksum 00b8! -> 6222] udp 4 (ttl 64, id 16061, len 32, bad ip cksum c! -> e7fb) 06:33:40.488701 rule 5.regress.2/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.22.54822 > 169.254.0.12.9: [bad udp cksum 543c! -> 000e] udp 4 (ttl 64, id 16061, len 32, bad ip cksum 0! -> e7f1) 06:33:40.756023 rule 5.regress.21/(match) [uid 0, pid 77559] pass out on lo11: [rewritten: src fc00::22:60842, dst fc00::12:9] fc00::12.39326 > fc00::12.9: [invalid udp cksum 0] udp 4 [flowlabel 0x4cc2d] (len 12, hlim 64) 06:33:40.756124 rule 5.regress.10/(match) [uid 0, pid 77559] pass in on lo11: fc00::22.60842 > fc00::12.9: [bad udp cksum f852! -> 4473] udp 4 [flowlabel 0x4cc2d] (len 12, hlim 64) 06:33:40.990714 rule 5.regress.2/(match) [uid 0, pid 77559] pass out on lo11: 169.254.0.14 > 169.254.0.14: icmp: echo request (id:e120 seq:0) [icmp cksum ok] (ttl 255, id 25614, len 84, bad ip cksum f8ac! -> 382) 06:33:40.990835 rule 5.regress.22/(match) [uid 0, pid 77559] pass in on lo11: [rewritten: src fc00::23:49948, dst fc00::24:128] 169.254.0.14 > 169.254.0.14: icmp: echo request (id:e120 seq:0) [icmp cksum ok] (ttl 255, id 25614, len 84, bad ip cksum 0! -> 382) 06:33:40.990925 rule 5.regress.10/(match) [uid 0, pid 77559] pass in on lo11: fc00::23 > fc00::24: icmp6: echo request (id:c31c seq:0) [icmp6 cksum ok] (len 64, hlim 63) 06:33:41.248864 rule 5.regress.10/(match) [uid 0, pid 77559] pass out on lo11: fc00::14 > fc00::14: icmp6: echo request (id:3424 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:41.248989 rule 5.regress.23/(match) [uid 0, pid 77559] pass in on lo11: [rewritten: src 169.254.0.23:56800, dst 169.254.0.24:8] fc00::14 > fc00::14: icmp6: echo request (id:3424 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:41.249068 rule 5.regress.2/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.23 > 169.254.0.24: icmp: echo request (id:dde0 seq:0) [icmp cksum ok] (DF) (ttl 63, id 10398, len 84, bad ip cksum 0! -> bedf) 06:33:41.530151 rule 5.regress.2/(match) [uid 0, pid 77559] pass out on lo11: 169.254.0.14.27118 > 169.254.0.14.9: [bad udp cksum 0001! -> 6c4c] udp 4 (ttl 64, id 47173, len 32, bad ip cksum c! -> 6e6f) 06:33:41.530228 rule 5.regress.22/(match) [uid 0, pid 77559] pass in on lo11: [rewritten: src fc00::23:58308, dst fc00::24:9] 169.254.0.14.27118 > 169.254.0.14.9: [bad udp cksum 5436! -> 6c4c] udp 4 (ttl 64, id 47173, len 32, bad ip cksum 0! -> 6e6f) 06:33:41.530293 rule 5.regress.10/(match) [uid 0, pid 77559] pass in on lo11: fc00::23.58308 > fc00::24.9: [bad udp cksum f865! -> 4e46] udp 4 (len 12, hlim 63) 06:33:41.782946 rule 5.regress.10/(match) [uid 0, pid 77559] pass out on lo11: fc00::14.29601 > fc00::14.9: [invalid udp cksum 0] udp 4 [flowlabel 0x7f3b5] (len 12, hlim 64) 06:33:41.783030 rule 5.regress.23/(match) [uid 0, pid 77559] pass in on lo11: [rewritten: src 169.254.0.23:57781, dst 169.254.0.24:9] fc00::14.29601 > fc00::14.9: [bad udp cksum f846! -> be88] udp 4 [flowlabel 0x7f3b5] (len 12, hlim 64) 06:33:41.783086 rule 5.regress.2/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.23.57781 > 169.254.0.24.9: [bad udp cksum 5449! -> f471] udp 4 (DF) (ttl 63, id 44784, len 32, bad ip cksum 0! -> 38b1) 06:33:42.033576 rule 5.regress.10/(match) [uid 0, pid 77559] pass out on lo11: ::1 > ::1: icmp6: echo request (id:b617 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:42.033691 rule 5.regress.10/(match) [uid 0, pid 77559] pass in on lo11: ::1 > ::1: icmp6: echo request (id:b617 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:42.304022 rule 5.regress.10/(match) [uid 0, pid 77559] pass out on lo11: ::1.23256 > ::1.9: [invalid udp cksum 0] udp 4 [flowlabel 0x32d56] (len 12, hlim 64) 06:33:42.304141 rule 5.regress.10/(match) [uid 0, pid 77559] pass in on lo11: ::1.23256 > ::1.9: [bad udp cksum 001f! -> cf79] udp 4 [flowlabel 0x32d56] (len 12, hlim 64) ==== run-bpf-12 ==== # show full logs cat pflog12.tcpdump 06:33:32.624097 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.1 > 169.254.0.1: icmp: echo request (id:00f0 seq:0) [icmp cksum ok] (ttl 255, id 35540, len 84, bad ip cksum 7564! -> dcd5) 06:33:32.624191 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.1 > 169.254.0.1: icmp: echo request (id:00f0 seq:0) [icmp cksum ok] (ttl 255, id 35540, len 84, bad ip cksum 0! -> dcd5) 06:33:32.624265 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.1 > 169.254.0.1: icmp: echo reply (id:00f0 seq:0) [bad icmp cksum 0! -> 746d] (ttl 255, id 52146, len 84, bad ip cksum 0! -> 9bf7) 06:33:32.624288 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.1 > 169.254.0.1: icmp: echo reply (id:00f0 seq:0) [icmp cksum ok] (ttl 255, id 52146, len 84, bad ip cksum 0! -> 9bf7) 06:33:32.881795 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::1 > fc00::1: icmp6: echo request (id:7a1d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:32.881897 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::1 > fc00::1: icmp6: echo request (id:7a1d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:32.881996 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::1 > fc00::1: icmp6: echo reply (id:7a1d seq:0) [bad icmp6 cksum 0! -> 1ee6] (len 64, hlim 64) 06:33:32.882023 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::1 > fc00::1: icmp6: echo reply (id:7a1d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:33.154710 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.1.26221 > 169.254.0.1.9: [bad udp cksum 00d6! -> 6fe7] udp 4 (ttl 64, id 65318, len 32, bad ip cksum c! -> 27a8) 06:33:33.154777 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.1.26221 > 169.254.0.1.9: [bad udp cksum 541c! -> 6fe7] udp 4 (ttl 64, id 65318, len 32, bad ip cksum 0! -> 27a8) 06:33:33.154839 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.1 > 169.254.0.1: icmp: 169.254.0.1 udp port 9 unreachable [bad icmp cksum 0! -> 6a06] for 169.254.0.1.26221 > 169.254.0.1.9: udp 4 (ttl 64, id 65318, len 32, bad ip cksum 0! -> 27a8) (ttl 255, id 14733, len 56, bad ip cksum 94e3! -> 2e39) 06:33:33.154861 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.1 > 169.254.0.1: icmp: 169.254.0.1 udp port 9 unreachable [icmp cksum ok] for 169.254.0.1.26221 > 169.254.0.1.9: udp 4 (ttl 64, id 65318, len 32, bad ip cksum 0! -> 27a8) (ttl 255, id 14733, len 56, bad ip cksum 0! -> 2e39) 06:33:33.416143 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::1.39616 > fc00::1.9: [invalid udp cksum 0] udp 4 [flowlabel 0x393de] (len 12, hlim 64) 06:33:33.416212 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::1.39616 > fc00::1.9: [bad udp cksum f820! -> 978f] udp 4 [flowlabel 0x393de] (len 12, hlim 64) 06:33:33.416279 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::1 > fc00::1: icmp6: fc00::1 udp port 9 unreachable [bad icmp6 cksum 0! -> a0df] (len 60, hlim 64) 06:33:33.416300 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::1 > fc00::1: icmp6: fc00::1 udp port 9 unreachable [icmp6 cksum ok] (len 60, hlim 64) 06:33:33.678236 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.2 > 169.254.0.2: icmp: echo request (id:3d76 seq:0) [icmp cksum ok] (ttl 255, id 3250, len 84, bad ip cksum 2f2! -> 5af6) 06:33:33.678346 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.2 > 169.254.0.2: icmp: echo request (id:3d76 seq:0) [icmp cksum ok] (ttl 255, id 3250, len 84, bad ip cksum 0! -> 5af6) 06:33:33.935850 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::2 > fc00::2: icmp6: echo request (id:e4c4 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:33.935965 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::2 > fc00::2: icmp6: echo request (id:e4c4 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:34.238585 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.2.31853 > 169.254.0.2.9: [bad udp cksum 2e2d! -> 59e5] udp 4 (ttl 64, id 10194, len 32, bad ip cksum c! -> fefa) 06:33:34.238663 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.2.31853 > 169.254.0.2.9: [bad udp cksum 541e! -> 59e5] udp 4 (ttl 64, id 10194, len 32, bad ip cksum 0! -> fefa) 06:33:34.501532 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::2.11492 > fc00::2.9: [invalid udp cksum 0] udp 4 [flowlabel 0x5d732] (len 12, hlim 64) 06:33:34.501618 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::2.11492 > fc00::2.9: [bad udp cksum f822! -> 056a] udp 4 [flowlabel 0x5d732] (len 12, hlim 64) 06:33:34.738788 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.3 > 169.254.0.3: icmp: echo request (id:18b2 seq:0) [icmp cksum ok] (ttl 255, id 63167, len 84, bad ip cksum 80a! -> 70e6) 06:33:34.738895 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.3 > 169.254.0.3: icmp: echo request (id:18b2 seq:0) [icmp cksum ok] (ttl 255, id 63167, len 84, bad ip cksum 0! -> 70e6) 06:33:34.998425 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::3 > fc00::3: icmp6: echo request (id:130d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:34.998540 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::3 > fc00::3: icmp6: echo request (id:130d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:35.275755 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.3.23895 > 169.254.0.3.9: [bad udp cksum 0040! -> 78f9] udp 4 (ttl 64, id 37320, len 32, bad ip cksum c! -> 9502) 06:33:35.275871 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.3.23895 > 169.254.0.3.9: [bad udp cksum 5420! -> 78f9] udp 4 (ttl 64, id 37320, len 32, bad ip cksum 0! -> 9502) 06:33:35.535949 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::3.13390 > fc00::3.9: [invalid udp cksum 0] udp 4 [flowlabel 0x43593] (len 12, hlim 64) 06:33:35.536041 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::3.13390 > fc00::3.9: [bad udp cksum f824! -> fdfd] udp 4 [flowlabel 0x43593] (len 12, hlim 64) 06:33:35.780392 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.4 > 169.254.0.4: icmp: echo request (id:c2d5 seq:0) [icmp cksum ok] (ttl 255, id 9590, len 84, bad ip cksum 80a! -> 422e) 06:33:35.780498 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.4 > 169.254.0.4: icmp: echo request (id:c2d5 seq:0) [icmp cksum ok] (ttl 255, id 9590, len 84, bad ip cksum 0! -> 422e) 06:33:36.036658 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::4 > fc00::4: icmp6: echo request (id:207d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:36.036777 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::4 > fc00::4: icmp6: echo request (id:207d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:36.323118 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.4.40760 > 169.254.0.4.9: [bad udp cksum 00b8! -> 3716] udp 4 (ttl 64, id 30065, len 32, bad ip cksum c! -> b157) 06:33:36.323196 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.4.40760 > 169.254.0.4.9: [bad udp cksum 5422! -> 3716] udp 4 (ttl 64, id 30065, len 32, bad ip cksum 0! -> b157) 06:33:36.571594 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::4.2403 > fc00::4.9: [invalid udp cksum 0] udp 4 [flowlabel 0x21657] (len 12, hlim 64) 06:33:36.571676 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::4.2403 > fc00::4.9: [bad udp cksum f826! -> 28e7] udp 4 [flowlabel 0x21657] (len 12, hlim 64) 06:33:36.808988 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.5 > 169.254.0.5: icmp: echo request (id:c805 seq:0) [icmp cksum ok] (ttl 255, id 18167, len 84, bad ip cksum 9! -> 20ab) 06:33:36.809098 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.5 > 169.254.0.5: icmp: echo request (id:c805 seq:0) [icmp cksum ok] (ttl 255, id 18167, len 84, bad ip cksum 0! -> 20ab) 06:33:37.064775 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::5 > fc00::5: icmp6: echo request (id:8bc7 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:37.064903 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::5 > fc00::5: icmp6: echo request (id:8bc7 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:37.342440 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.5.37674 > 169.254.0.5.9: [bad udp cksum 0001! -> 4322] udp 4 (ttl 64, id 53695, len 32, bad ip cksum c! -> 5507) 06:33:37.342517 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.5.37674 > 169.254.0.5.9: [bad udp cksum 5424! -> 4322] udp 4 (ttl 64, id 53695, len 32, bad ip cksum 0! -> 5507) 06:33:37.601471 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::5.8197 > fc00::5.9: [invalid udp cksum 0] udp 4 [flowlabel 0xbb6a] (len 12, hlim 64) 06:33:37.601613 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::5.8197 > fc00::5.9: [bad udp cksum f828! -> 1243] udp 4 [flowlabel 0xbb6a] (len 12, hlim 64) 06:33:37.842696 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.6 > 169.254.0.6: icmp: echo request (id:1821 seq:0) [icmp cksum ok] (ttl 255, id 63086, len 84, bad ip cksum 4005! -> 7131) 06:33:37.842803 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.6 > 169.254.0.6: icmp: echo request (id:1821 seq:0) [icmp cksum ok] (ttl 255, id 63086, len 84, bad ip cksum 0! -> 7131) 06:33:38.102786 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::6 > fc00::6: icmp6: echo request (id:d77c seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:38.102902 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::6 > fc00::6: icmp6: echo request (id:d77c seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:38.377771 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.6.16673 > 169.254.0.6.9: [bad udp cksum 0006! -> 9529] udp 4 (ttl 64, id 45117, len 32, bad ip cksum c! -> 7687) 06:33:38.378687 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.6.16673 > 169.254.0.6.9: [bad udp cksum 5426! -> 9529] udp 4 (ttl 64, id 45117, len 32, bad ip cksum 0! -> 7687) 06:33:38.677105 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::6.39703 > fc00::6.9: [invalid udp cksum 0] udp 4 [flowlabel 0x23758] (len 12, hlim 64) 06:33:38.677184 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::6.39703 > fc00::6.9: [bad udp cksum f82a! -> 972e] udp 4 [flowlabel 0x23758] (len 12, hlim 64) 06:33:38.897446 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.11 > 169.254.0.11: icmp: echo request (id:5534 seq:0) [icmp cksum ok] (ttl 255, id 5303, len 84, bad ip cksum 9! -> 52df) 06:33:38.897568 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.11 > 169.254.0.21: icmp: echo request (id:5534 seq:0) [icmp cksum ok] (ttl 255, id 5303, len 84, bad ip cksum 0! -> 52d5) 06:33:39.173848 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::11 > fc00::11: icmp6: echo request (id:2fc7 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:39.173995 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::11 > fc00::21: icmp6: echo request (id:2fc7 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:39.464963 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.11.23042 > 169.254.0.11.9: [bad udp cksum 0001! -> 7c3e] udp 4 (ttl 64, id 63912, len 32, bad ip cksum c! -> 2d12) 06:33:39.465059 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.11.23042 > 169.254.0.21.9: [bad udp cksum 543a! -> 7c34] udp 4 (ttl 64, id 63912, len 32, bad ip cksum 0! -> 2d08) 06:33:39.724562 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::11.36283 > fc00::11.9: [invalid udp cksum 0] udp 4 [flowlabel 0x7e36] (len 12, hlim 64) 06:33:39.724667 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::11.36283 > fc00::21.9: [bad udp cksum f850! -> a464] udp 4 [flowlabel 0x7e36] (len 12, hlim 64) 06:33:39.959648 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.12 > 169.254.0.12: icmp: echo request (id:8cd2 seq:0) [icmp cksum ok] (ttl 255, id 10980, len 84, bad ip cksum 80a! -> 3cb0) 06:33:39.959768 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.22 > 169.254.0.12: icmp: echo request (id:c97b seq:0) [icmp cksum ok] (ttl 255, id 10980, len 84, bad ip cksum 0! -> 3ca6) 06:33:40.216070 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::12 > fc00::12: icmp6: echo request (id:e58c seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:40.216200 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::22 > fc00::12: icmp6: echo request (id:96f1 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:40.488603 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.12.29724 > 169.254.0.12.9: [bad udp cksum 00b8! -> 6222] udp 4 (ttl 64, id 16061, len 32, bad ip cksum c! -> e7fb) 06:33:40.488697 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.22.54822 > 169.254.0.12.9: [bad udp cksum 543c! -> 000e] udp 4 (ttl 64, id 16061, len 32, bad ip cksum 0! -> e7f1) 06:33:40.755993 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::12.39326 > fc00::12.9: [invalid udp cksum 0] udp 4 [flowlabel 0x4cc2d] (len 12, hlim 64) 06:33:40.756120 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::22.60842 > fc00::12.9: [bad udp cksum f852! -> 4473] udp 4 [flowlabel 0x4cc2d] (len 12, hlim 64) 06:33:40.990702 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.14 > 169.254.0.14: icmp: echo request (id:e120 seq:0) [icmp cksum ok] (ttl 255, id 25614, len 84, bad ip cksum f8ac! -> 382) 06:33:40.990813 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.14 > 169.254.0.14: icmp: echo request (id:e120 seq:0) [icmp cksum ok] (ttl 255, id 25614, len 84, bad ip cksum 0! -> 382) 06:33:40.990919 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::23 > fc00::24: icmp6: echo request (id:c31c seq:0) [icmp6 cksum ok] (len 64, hlim 63) 06:33:41.248852 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::14 > fc00::14: icmp6: echo request (id:3424 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:41.248968 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::14 > fc00::14: icmp6: echo request (id:3424 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:41.249061 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.23 > 169.254.0.24: icmp: echo request (id:dde0 seq:0) [icmp cksum ok] (DF) (ttl 63, id 10398, len 84, bad ip cksum 0! -> bedf) 06:33:41.530139 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.14.27118 > 169.254.0.14.9: [bad udp cksum 0001! -> 6c4c] udp 4 (ttl 64, id 47173, len 32, bad ip cksum c! -> 6e6f) 06:33:41.530216 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.14.27118 > 169.254.0.14.9: [bad udp cksum 5436! -> 6c4c] udp 4 (ttl 64, id 47173, len 32, bad ip cksum 0! -> 6e6f) 06:33:41.530286 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::23.58308 > fc00::24.9: [bad udp cksum f865! -> 4e46] udp 4 (len 12, hlim 63) 06:33:41.782934 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::14.29601 > fc00::14.9: [invalid udp cksum 0] udp 4 [flowlabel 0x7f3b5] (len 12, hlim 64) 06:33:41.783019 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::14.29601 > fc00::14.9: [bad udp cksum f846! -> be88] udp 4 [flowlabel 0x7f3b5] (len 12, hlim 64) 06:33:41.783080 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.23.57781 > 169.254.0.24.9: [bad udp cksum 5449! -> f471] udp 4 (DF) (ttl 63, id 44784, len 32, bad ip cksum 0! -> 38b1) 06:33:42.033564 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: ::1 > ::1: icmp6: echo request (id:b617 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:42.033679 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: ::1 > ::1: icmp6: echo request (id:b617 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:42.304011 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: ::1.23256 > ::1.9: [invalid udp cksum 0] udp 4 [flowlabel 0x32d56] (len 12, hlim 64) 06:33:42.304130 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: ::1.23256 > ::1.9: [bad udp cksum 001f! -> cf79] udp 4 [flowlabel 0x32d56] (len 12, hlim 64) ==== run-bpf-13 ==== # show full logs cat pflog13.tcpdump ==== run-bpf-nothing ==== # rule with pflog13 is never used ! grep . pflog13.tcpdump ==== run-bpf-everything ==== # rule with pflog12 matches on every packet grep 'regress\.1/.* > 169.254.0.1:' pflog12.tcpdump 06:33:32.624097 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.1 > 169.254.0.1: icmp: echo request (id:00f0 seq:0) [icmp cksum ok] (ttl 255, id 35540, len 84, bad ip cksum 7564! -> dcd5) 06:33:32.624191 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.1 > 169.254.0.1: icmp: echo request (id:00f0 seq:0) [icmp cksum ok] (ttl 255, id 35540, len 84, bad ip cksum 0! -> dcd5) 06:33:32.624265 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.1 > 169.254.0.1: icmp: echo reply (id:00f0 seq:0) [bad icmp cksum 0! -> 746d] (ttl 255, id 52146, len 84, bad ip cksum 0! -> 9bf7) 06:33:32.624288 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.1 > 169.254.0.1: icmp: echo reply (id:00f0 seq:0) [icmp cksum ok] (ttl 255, id 52146, len 84, bad ip cksum 0! -> 9bf7) 06:33:33.154839 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.1 > 169.254.0.1: icmp: 169.254.0.1 udp port 9 unreachable [bad icmp cksum 0! -> 6a06] for 169.254.0.1.26221 > 169.254.0.1.9: udp 4 (ttl 64, id 65318, len 32, bad ip cksum 0! -> 27a8) (ttl 255, id 14733, len 56, bad ip cksum 94e3! -> 2e39) 06:33:33.154861 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.1 > 169.254.0.1: icmp: 169.254.0.1 udp port 9 unreachable [icmp cksum ok] for 169.254.0.1.26221 > 169.254.0.1.9: udp 4 (ttl 64, id 65318, len 32, bad ip cksum 0! -> 27a8) (ttl 255, id 14733, len 56, bad ip cksum 0! -> 2e39) grep 'regress\.1/.* > 169.254.0.2:' pflog12.tcpdump 06:33:33.678236 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.2 > 169.254.0.2: icmp: echo request (id:3d76 seq:0) [icmp cksum ok] (ttl 255, id 3250, len 84, bad ip cksum 2f2! -> 5af6) 06:33:33.678346 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.2 > 169.254.0.2: icmp: echo request (id:3d76 seq:0) [icmp cksum ok] (ttl 255, id 3250, len 84, bad ip cksum 0! -> 5af6) grep 'regress\.1/.* > 169.254.0.3:' pflog12.tcpdump 06:33:34.738788 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.3 > 169.254.0.3: icmp: echo request (id:18b2 seq:0) [icmp cksum ok] (ttl 255, id 63167, len 84, bad ip cksum 80a! -> 70e6) 06:33:34.738895 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.3 > 169.254.0.3: icmp: echo request (id:18b2 seq:0) [icmp cksum ok] (ttl 255, id 63167, len 84, bad ip cksum 0! -> 70e6) grep 'regress\.1/.* > 169.254.0.4:' pflog12.tcpdump 06:33:35.780392 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.4 > 169.254.0.4: icmp: echo request (id:c2d5 seq:0) [icmp cksum ok] (ttl 255, id 9590, len 84, bad ip cksum 80a! -> 422e) 06:33:35.780498 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.4 > 169.254.0.4: icmp: echo request (id:c2d5 seq:0) [icmp cksum ok] (ttl 255, id 9590, len 84, bad ip cksum 0! -> 422e) grep 'regress\.1/.* > 169.254.0.5:' pflog12.tcpdump 06:33:36.808988 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.5 > 169.254.0.5: icmp: echo request (id:c805 seq:0) [icmp cksum ok] (ttl 255, id 18167, len 84, bad ip cksum 9! -> 20ab) 06:33:36.809098 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.5 > 169.254.0.5: icmp: echo request (id:c805 seq:0) [icmp cksum ok] (ttl 255, id 18167, len 84, bad ip cksum 0! -> 20ab) grep 'regress\.1/.* > 169.254.0.6:' pflog12.tcpdump 06:33:37.842696 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.6 > 169.254.0.6: icmp: echo request (id:1821 seq:0) [icmp cksum ok] (ttl 255, id 63086, len 84, bad ip cksum 4005! -> 7131) 06:33:37.842803 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.6 > 169.254.0.6: icmp: echo request (id:1821 seq:0) [icmp cksum ok] (ttl 255, id 63086, len 84, bad ip cksum 0! -> 7131) grep 'regress\.1/.* > 169.254.0.11:' pflog12.tcpdump 06:33:38.897446 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.11 > 169.254.0.11: icmp: echo request (id:5534 seq:0) [icmp cksum ok] (ttl 255, id 5303, len 84, bad ip cksum 9! -> 52df) grep 'regress\.1/.* > 169.254.0.12:' pflog12.tcpdump 06:33:39.959648 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.12 > 169.254.0.12: icmp: echo request (id:8cd2 seq:0) [icmp cksum ok] (ttl 255, id 10980, len 84, bad ip cksum 80a! -> 3cb0) 06:33:39.959768 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.22 > 169.254.0.12: icmp: echo request (id:c97b seq:0) [icmp cksum ok] (ttl 255, id 10980, len 84, bad ip cksum 0! -> 3ca6) grep 'regress\.1/.* > 169.254.0.14:' pflog12.tcpdump 06:33:40.990702 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: 169.254.0.14 > 169.254.0.14: icmp: echo request (id:e120 seq:0) [icmp cksum ok] (ttl 255, id 25614, len 84, bad ip cksum f8ac! -> 382) 06:33:40.990813 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: 169.254.0.14 > 169.254.0.14: icmp: echo request (id:e120 seq:0) [icmp cksum ok] (ttl 255, id 25614, len 84, bad ip cksum 0! -> 382) ==== run-bpf-everything6 ==== # rule with pflog12 matches on every packet grep 'regress\.1/.* > fc00::1:' pflog12.tcpdump 06:33:32.881795 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::1 > fc00::1: icmp6: echo request (id:7a1d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:32.881897 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::1 > fc00::1: icmp6: echo request (id:7a1d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:32.881996 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::1 > fc00::1: icmp6: echo reply (id:7a1d seq:0) [bad icmp6 cksum 0! -> 1ee6] (len 64, hlim 64) 06:33:32.882023 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::1 > fc00::1: icmp6: echo reply (id:7a1d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:33.416279 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::1 > fc00::1: icmp6: fc00::1 udp port 9 unreachable [bad icmp6 cksum 0! -> a0df] (len 60, hlim 64) 06:33:33.416300 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::1 > fc00::1: icmp6: fc00::1 udp port 9 unreachable [icmp6 cksum ok] (len 60, hlim 64) grep 'regress\.1/.* > fc00::2:' pflog12.tcpdump 06:33:33.935850 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::2 > fc00::2: icmp6: echo request (id:e4c4 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:33.935965 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::2 > fc00::2: icmp6: echo request (id:e4c4 seq:0) [icmp6 cksum ok] (len 64, hlim 64) grep 'regress\.1/.* > fc00::3:' pflog12.tcpdump 06:33:34.998425 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::3 > fc00::3: icmp6: echo request (id:130d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:34.998540 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::3 > fc00::3: icmp6: echo request (id:130d seq:0) [icmp6 cksum ok] (len 64, hlim 64) grep 'regress\.1/.* > fc00::4:' pflog12.tcpdump 06:33:36.036658 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::4 > fc00::4: icmp6: echo request (id:207d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:36.036777 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::4 > fc00::4: icmp6: echo request (id:207d seq:0) [icmp6 cksum ok] (len 64, hlim 64) grep 'regress\.1/.* > fc00::5:' pflog12.tcpdump 06:33:37.064775 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::5 > fc00::5: icmp6: echo request (id:8bc7 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:37.064903 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::5 > fc00::5: icmp6: echo request (id:8bc7 seq:0) [icmp6 cksum ok] (len 64, hlim 64) grep 'regress\.1/.* > fc00::6:' pflog12.tcpdump 06:33:38.102786 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::6 > fc00::6: icmp6: echo request (id:d77c seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:38.102902 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::6 > fc00::6: icmp6: echo request (id:d77c seq:0) [icmp6 cksum ok] (len 64, hlim 64) grep 'regress\.1/.* > fc00::11:' pflog12.tcpdump 06:33:39.173848 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::11 > fc00::11: icmp6: echo request (id:2fc7 seq:0) [icmp6 cksum ok] (len 64, hlim 64) grep 'regress\.1/.* > fc00::12:' pflog12.tcpdump 06:33:40.216070 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::12 > fc00::12: icmp6: echo request (id:e58c seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:40.216200 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::22 > fc00::12: icmp6: echo request (id:96f1 seq:0) [icmp6 cksum ok] (len 64, hlim 64) grep 'regress\.1/.* > fc00::14:' pflog12.tcpdump 06:33:41.248852 rule 5.regress.1/(match) [uid 0, pid 77559] match out on lo11: fc00::14 > fc00::14: icmp6: echo request (id:3424 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:41.248968 rule 5.regress.1/(match) [uid 0, pid 77559] match in on lo11: fc00::14 > fc00::14: icmp6: echo request (id:3424 seq:0) [icmp6 cksum ok] (len 64, hlim 64) ==== run-bpf-all ==== # reply without keep state grep 'regress\.3/.* 169.254.0.1 > 169.254.0.1: icmp: echo request' pflog11.tcpdump 06:33:32.624108 rule 5.regress.3/(match) [uid 0, pid 77559] pass out on lo11: 169.254.0.1 > 169.254.0.1: icmp: echo request (id:00f0 seq:0) [icmp cksum ok] (ttl 255, id 35540, len 84, bad ip cksum 7564! -> dcd5) 06:33:32.624202 rule 5.regress.3/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.1 > 169.254.0.1: icmp: echo request (id:00f0 seq:0) [icmp cksum ok] (ttl 255, id 35540, len 84, bad ip cksum 0! -> dcd5) grep 'regress\.3/.* 169.254.0.1 > 169.254.0.1: icmp: echo reply' pflog11.tcpdump 06:33:32.624269 rule 5.regress.3/(match) [uid 0, pid 77559] pass out on lo11: 169.254.0.1 > 169.254.0.1: icmp: echo reply (id:00f0 seq:0) [bad icmp cksum 0! -> 746d] (ttl 255, id 52146, len 84, bad ip cksum 0! -> 9bf7) 06:33:32.624291 rule 5.regress.3/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.1 > 169.254.0.1: icmp: echo reply (id:00f0 seq:0) [icmp cksum ok] (ttl 255, id 52146, len 84, bad ip cksum 0! -> 9bf7) # no reply with keep state and without all grep 'regress\.4/.* 169.254.0.2 > 169.254.0.2: icmp: echo request' pflog11.tcpdump 06:33:33.678246 rule 5.regress.4/(match) [uid 0, pid 77559] pass out on lo11: 169.254.0.2 > 169.254.0.2: icmp: echo request (id:3d76 seq:0) [icmp cksum ok] (ttl 255, id 3250, len 84, bad ip cksum 2f2! -> 5af6) 06:33:33.678356 rule 5.regress.4/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.2 > 169.254.0.2: icmp: echo request (id:3d76 seq:0) [icmp cksum ok] (ttl 255, id 3250, len 84, bad ip cksum 0! -> 5af6) ! grep 'regress\.4/.* 169.254.0.2 >169.254.0.2: icmp: echo reply' pflog11.tcpdump # reply with keep state and with all grep 'regress\.5/.* 169.254.0.3 > 169.254.0.3: icmp: echo request' pflog11.tcpdump 06:33:34.738800 rule 5.regress.5/(match) [uid 0, pid 77559] pass out on lo11: 169.254.0.3 > 169.254.0.3: icmp: echo request (id:18b2 seq:0) [icmp cksum ok] (ttl 255, id 63167, len 84, bad ip cksum 80a! -> 70e6) 06:33:34.738906 rule 5.regress.5/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.3 > 169.254.0.3: icmp: echo request (id:18b2 seq:0) [icmp cksum ok] (ttl 255, id 63167, len 84, bad ip cksum 0! -> 70e6) # XXX anchor name missing grep '/.* 169.254.0.3 > 169.254.0.3: icmp: echo reply' pflog11.tcpdump 06:33:34.738979 rule 5/(match) [uid 0, pid 77559] pass out on lo11: 169.254.0.3 > 169.254.0.3: icmp: echo reply (id:18b2 seq:0) [bad icmp cksum 0! -> 1063] (ttl 255, id 19082, len 84, bad ip cksum 0! -> 1d1c) 06:33:34.738994 rule 5/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.3 > 169.254.0.3: icmp: echo reply (id:18b2 seq:0) [icmp cksum ok] (ttl 255, id 19082, len 84, bad ip cksum 0! -> 1d1c) ==== run-bpf-all6 ==== # reply without keep state grep 'regress\.11/.* fc00::1 > fc00::1: icmp6: echo request' pflog11.tcpdump 06:33:32.881807 rule 5.regress.11/(match) [uid 0, pid 77559] pass out on lo11: fc00::1 > fc00::1: icmp6: echo request (id:7a1d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:32.881907 rule 5.regress.11/(match) [uid 0, pid 77559] pass in on lo11: fc00::1 > fc00::1: icmp6: echo request (id:7a1d seq:0) [icmp6 cksum ok] (len 64, hlim 64) grep 'regress\.11/.* fc00::1 > fc00::1: icmp6: echo reply' pflog11.tcpdump 06:33:32.882000 rule 5.regress.11/(match) [uid 0, pid 77559] pass out on lo11: fc00::1 > fc00::1: icmp6: echo reply (id:7a1d seq:0) [bad icmp6 cksum 0! -> 1ee6] (len 64, hlim 64) 06:33:32.882026 rule 5.regress.11/(match) [uid 0, pid 77559] pass in on lo11: fc00::1 > fc00::1: icmp6: echo reply (id:7a1d seq:0) [icmp6 cksum ok] (len 64, hlim 64) # no reply with keep state and without all grep 'regress\.12/.* fc00::2 > fc00::2: icmp6: echo request' pflog11.tcpdump 06:33:33.935862 rule 5.regress.12/(match) [uid 0, pid 77559] pass out on lo11: fc00::2 > fc00::2: icmp6: echo request (id:e4c4 seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:33.935976 rule 5.regress.12/(match) [uid 0, pid 77559] pass in on lo11: fc00::2 > fc00::2: icmp6: echo request (id:e4c4 seq:0) [icmp6 cksum ok] (len 64, hlim 64) ! grep 'regress\.12/.* fc00::2 > fc00::2: icmp6: echo reply' pflog11.tcpdump # reply with keep state and with all grep 'regress\.13/.* fc00::3 > fc00::3: icmp6: echo request' pflog11.tcpdump 06:33:34.998438 rule 5.regress.13/(match) [uid 0, pid 77559] pass out on lo11: fc00::3 > fc00::3: icmp6: echo request (id:130d seq:0) [icmp6 cksum ok] (len 64, hlim 64) 06:33:34.998550 rule 5.regress.13/(match) [uid 0, pid 77559] pass in on lo11: fc00::3 > fc00::3: icmp6: echo request (id:130d seq:0) [icmp6 cksum ok] (len 64, hlim 64) # XXX anchor name missing grep '/.* fc00::3 > fc00::3: icmp6: echo reply' pflog11.tcpdump 06:33:34.998652 rule 5/(match) [uid 0, pid 77559] pass out on lo11: fc00::3 > fc00::3: icmp6: echo reply (id:130d seq:0) [bad icmp6 cksum 0! -> 43be] (len 64, hlim 64) 06:33:34.998669 rule 5/(match) [uid 0, pid 77559] pass in on lo11: fc00::3 > fc00::3: icmp6: echo reply (id:130d seq:0) [icmp6 cksum ok] (len 64, hlim 64) ==== run-bpf-user ==== # out rule creates log entry with uid grep 'regress\.6/.* pass out on lo11: \[uid 0, pid [0-9]*\] 169.254.0.4\.[0-9]* > 169.254.0.4\.9: .* udp [0-9]' pflog11.tcpdump 06:33:36.323130 rule 5.regress.6/(match) [uid 0, pid 77559] pass out on lo11: [uid 0, pid 94589] 169.254.0.4.40760 > 169.254.0.4.9: [bad udp cksum 00b8! -> 3716] udp 4 (ttl 64, id 30065, len 32, bad ip cksum c! -> b157) # in rule has no uid at log entry grep 'regress\.6/.* pass in on lo11: 169.254.0.4\.[0-9]* > 169.254.0.4\.9: .* udp [0-9]' pflog11.tcpdump 06:33:36.323204 rule 5.regress.6/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.4.40760 > 169.254.0.4.9: [bad udp cksum 5422! -> 3716] udp 4 (ttl 64, id 30065, len 32, bad ip cksum 0! -> b157) # icmp has no uid at log entry grep 'regress\.6/.* pass out on lo11: 169.254.0.4 > 169.254.0\.4: icmp: echo request' pflog11.tcpdump 06:33:35.780404 rule 5.regress.6/(match) [uid 0, pid 77559] pass out on lo11: 169.254.0.4 > 169.254.0.4: icmp: echo request (id:c2d5 seq:0) [icmp cksum ok] (ttl 255, id 9590, len 84, bad ip cksum 80a! -> 422e) # rule without user has no uid in log entry grep 'regress\.3/.* pass out on lo11: 169.254.0.1\.[0-9]* > 169.254.0.1\.9: .* udp [0-9]' pflog11.tcpdump 06:33:33.154723 rule 5.regress.3/(match) [uid 0, pid 77559] pass out on lo11: 169.254.0.1.26221 > 169.254.0.1.9: [bad udp cksum 00d6! -> 6fe7] udp 4 (ttl 64, id 65318, len 32, bad ip cksum c! -> 27a8) ==== run-bpf-user6 ==== # out rule creates log entry with uid grep 'regress\.14/.* pass out on lo11: \[uid 0, pid [0-9]*\] fc00::4\.[0-9]* > fc00::4\.9:.* udp [0-9]' pflog11.tcpdump 06:33:36.571607 rule 5.regress.14/(match) [uid 0, pid 77559] pass out on lo11: [uid 0, pid 88431] fc00::4.2403 > fc00::4.9: [invalid udp cksum 0] udp 4 [flowlabel 0x21657] (len 12, hlim 64) # in rule has no uid at log entry grep 'regress\.14/.* pass in on lo11: fc00::4\.[0-9]* > fc00::4\.9:.* udp [0-9]' pflog11.tcpdump 06:33:36.571684 rule 5.regress.14/(match) [uid 0, pid 77559] pass in on lo11: fc00::4.2403 > fc00::4.9: [bad udp cksum f826! -> 28e7] udp 4 [flowlabel 0x21657] (len 12, hlim 64) # icmp has no uid at log entry grep 'regress\.14/.* pass out on lo11: fc00::4 > fc00::4: icmp6: echo request' pflog11.tcpdump 06:33:36.036671 rule 5.regress.14/(match) [uid 0, pid 77559] pass out on lo11: fc00::4 > fc00::4: icmp6: echo request (id:207d seq:0) [icmp6 cksum ok] (len 64, hlim 64) # rule without user has no uid in log entry grep 'regress\.11/.* pass out on lo11: fc00::1\.[0-9]* > fc00::1\.9:.* udp [0-9]' pflog11.tcpdump 06:33:33.416156 rule 5.regress.11/(match) [uid 0, pid 77559] pass out on lo11: fc00::1.39616 > fc00::1.9: [invalid udp cksum 0] udp 4 [flowlabel 0x393de] (len 12, hlim 64) ==== run-bpf-matches ==== # XXX The log matches keyword seems to be totally broken. # pf_log_matches() is never called. Investigate later. DISABLED ==== run-bpf-rdr ==== # loopback input logs redirected packet grep 'regress\.2/.* pass in .*:.* 169.254.0.11 > 169.254.0.21: icmp: echo request' pflog11.tcpdump 06:33:38.897578 rule 5.regress.2/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.11 > 169.254.0.21: icmp: echo request (id:5534 seq:0) [icmp cksum ok] (ttl 255, id 5303, len 84, bad ip cksum 0! -> 52d5) # loopback output redirects and logs original packet grep 'regress\.18/.* pass out .*:.* 169.254.0.11 > 169.254.0.11: icmp: echo request' pflog11.tcpdump 06:33:38.897462 rule 5.regress.18/(match) [uid 0, pid 77559] pass out on lo11: [rewritten: src 169.254.0.11:21812, dst 169.254.0.21:8] 169.254.0.11 > 169.254.0.11: icmp: echo request (id:5534 seq:0) [icmp cksum ok] (ttl 255, id 5303, len 84, bad ip cksum 9! -> 52df) ==== run-bpf-rdr6 ==== # loopback input logs redirected packet grep 'regress\.10/.* pass in .*:.* fc00::11 > fc00::21: icmp6: echo request' pflog11.tcpdump 06:33:39.174006 rule 5.regress.10/(match) [uid 0, pid 77559] pass in on lo11: fc00::11 > fc00::21: icmp6: echo request (id:2fc7 seq:0) [icmp6 cksum ok] (len 64, hlim 64) # loopback output redirects and logs original packet grep 'regress\.20/.* pass out .*:.* fc00::11 > fc00::11: icmp6: echo request' pflog11.tcpdump 06:33:39.173861 rule 5.regress.20/(match) [uid 0, pid 77559] pass out on lo11: [rewritten: src fc00::11:12231, dst fc00::21:128] fc00::11 > fc00::11: icmp6: echo request (id:2fc7 seq:0) [icmp6 cksum ok] (len 64, hlim 64) ==== run-bpf-nat ==== # loopback input logs redirected packet grep 'regress\.2/.* pass in .*:.* 169.254.0.22 > 169.254.0.12: icmp: echo request' pflog11.tcpdump 06:33:39.959779 rule 5.regress.2/(match) [uid 0, pid 77559] pass in on lo11: 169.254.0.22 > 169.254.0.12: icmp: echo request (id:c97b seq:0) [icmp cksum ok] (ttl 255, id 10980, len 84, bad ip cksum 0! -> 3ca6) # loopback output redirects and logs original packet grep 'regress\.19/.* pass out .*:.* 169.254.0.12 > 169.254.0.12: icmp: echo request' pflog11.tcpdump 06:33:39.959666 rule 5.regress.19/(match) [uid 0, pid 77559] pass out on lo11: [rewritten: src 169.254.0.22:51579, dst 169.254.0.12:8] 169.254.0.12 > 169.254.0.12: icmp: echo request (id:8cd2 seq:0) [icmp cksum ok] (ttl 255, id 10980, len 84, bad ip cksum 80a! -> 3cb0) ==== run-bpf-nat6 ==== # loopback input logs redirected packet grep 'regress\.10/.* pass in .*:.* fc00::22 > fc00::12: icmp6: echo request' pflog11.tcpdump 06:33:40.216212 rule 5.regress.10/(match) [uid 0, pid 77559] pass in on lo11: fc00::22 > fc00::12: icmp6: echo request (id:96f1 seq:0) [icmp6 cksum ok] (len 64, hlim 64) # loopback output redirects and logs original packet grep 'regress\.21/.* pass out .*:.* fc00::12 > fc00::12: icmp6: echo request' pflog11.tcpdump 06:33:40.216088 rule 5.regress.21/(match) [uid 0, pid 77559] pass out on lo11: [rewritten: src fc00::22:38641, dst fc00::12:128] fc00::12 > fc00::12: icmp6: echo request (id:e58c seq:0) [icmp6 cksum ok] (len 64, hlim 64) ==== run-bpf-af ==== # pf in rule logs original IPv4 packet grep 'regress\.22/.* pass in .*:.* 169.254.0.14 > 169.254.0.14: icmp: echo request' pflog11.tcpdump 06:33:40.990835 rule 5.regress.22/(match) [uid 0, pid 77559] pass in on lo11: [rewritten: src fc00::23:49948, dst fc00::24:128] 169.254.0.14 > 169.254.0.14: icmp: echo request (id:e120 seq:0) [icmp cksum ok] (ttl 255, id 25614, len 84, bad ip cksum 0! -> 382) ==== run-bpf-af6 ==== # pf in rule logs original IPv6 packet grep 'regress\.23/.* pass in .*:.* fc00::14 > fc00::14: icmp6: echo request' pflog11.tcpdump 06:33:41.248989 rule 5.regress.23/(match) [uid 0, pid 77559] pass in on lo11: [rewritten: src 169.254.0.23:56800, dst 169.254.0.24:8] fc00::14 > fc00::14: icmp6: echo request (id:3424 seq:0) [icmp6 cksum ok] (len 64, hlim 64) ==== run-bpf-rewrite ==== # rdr-to address has been rewritten grep '\[rewritten: src 169.254.0.11:[0-9]*, dst 169.254.0.21:[0-9]*\] 169.254.0.11 > 169.254.0.11' pflog11.tcpdump 06:33:38.897462 rule 5.regress.18/(match) [uid 0, pid 77559] pass out on lo11: [rewritten: src 169.254.0.11:21812, dst 169.254.0.21:8] 169.254.0.11 > 169.254.0.11: icmp: echo request (id:5534 seq:0) [icmp cksum ok] (ttl 255, id 5303, len 84, bad ip cksum 9! -> 52df) # nat-to address has been rewritten grep '\[rewritten: src 169.254.0.22:[0-9]*, dst 169.254.0.12:[0-9]*\] 169.254.0.12 > 169.254.0.12' pflog11.tcpdump 06:33:39.959666 rule 5.regress.19/(match) [uid 0, pid 77559] pass out on lo11: [rewritten: src 169.254.0.22:51579, dst 169.254.0.12:8] 169.254.0.12 > 169.254.0.12: icmp: echo request (id:8cd2 seq:0) [icmp cksum ok] (ttl 255, id 10980, len 84, bad ip cksum 80a! -> 3cb0) # af-to address has been rewritten grep '\[rewritten: src fc00::23:[0-9]*, dst fc00::24:[0-9]*\] 169.254.0.14 > 169.254.0.14' pflog11.tcpdump 06:33:40.990835 rule 5.regress.22/(match) [uid 0, pid 77559] pass in on lo11: [rewritten: src fc00::23:49948, dst fc00::24:128] 169.254.0.14 > 169.254.0.14: icmp: echo request (id:e120 seq:0) [icmp cksum ok] (ttl 255, id 25614, len 84, bad ip cksum 0! -> 382) ==== run-bpf-rewrite6 ==== # rdr-to address has been rewritten grep '\[rewritten: src fc00::11:[0-9]*, dst fc00::21:[0-9]*\] fc00::11 > fc00::11' pflog11.tcpdump 06:33:39.173861 rule 5.regress.20/(match) [uid 0, pid 77559] pass out on lo11: [rewritten: src fc00::11:12231, dst fc00::21:128] fc00::11 > fc00::11: icmp6: echo request (id:2fc7 seq:0) [icmp6 cksum ok] (len 64, hlim 64) # nat-to address has been rewritten grep '\[rewritten: src fc00::22:[0-9]*, dst fc00::12:[0-9]*\] fc00::12 > fc00::12' pflog11.tcpdump 06:33:40.216088 rule 5.regress.21/(match) [uid 0, pid 77559] pass out on lo11: [rewritten: src fc00::22:38641, dst fc00::12:128] fc00::12 > fc00::12: icmp6: echo request (id:e58c seq:0) [icmp6 cksum ok] (len 64, hlim 64) # af-to address has been rewritten grep '\[rewritten: src 169.254.0.23:[0-9]*, dst 169.254.0.24:[0-9]*\] fc00::14 > fc00::14' pflog11.tcpdump 06:33:41.248989 rule 5.regress.23/(match) [uid 0, pid 77559] pass in on lo11: [rewritten: src 169.254.0.23:56800, dst 169.254.0.24:8] fc00::14 > fc00::14: icmp6: echo request (id:3424 seq:0) [icmp6 cksum ok] (len 64, hlim 64) ==== unconfig ==== # Destroy interfaces. /sbin/ifconfig lo11 rdomain 11 /sbin/ifconfig lo11 inet 169.254.0.1 delete /sbin/ifconfig lo11 inet6 fc00::1 delete /sbin/ifconfig lo11 inet 169.254.0.2 delete /sbin/ifconfig lo11 inet6 fc00::2 delete /sbin/ifconfig lo11 inet 169.254.0.3 delete /sbin/ifconfig lo11 inet6 fc00::3 delete /sbin/ifconfig lo11 inet 169.254.0.4 delete /sbin/ifconfig lo11 inet6 fc00::4 delete /sbin/ifconfig lo11 inet 169.254.0.5 delete /sbin/ifconfig lo11 inet6 fc00::5 delete /sbin/ifconfig lo11 inet 169.254.0.6 delete /sbin/ifconfig lo11 inet6 fc00::6 delete /sbin/ifconfig lo11 inet 169.254.0.11 delete /sbin/ifconfig lo11 inet6 fc00::11 delete /sbin/ifconfig lo11 inet 169.254.0.12 delete /sbin/ifconfig lo11 inet6 fc00::12 delete /sbin/ifconfig lo11 inet 169.254.0.14 delete /sbin/ifconfig lo11 inet6 fc00::14 delete /sbin/ifconfig lo11 inet 169.254.0.21 delete /sbin/ifconfig lo11 inet6 fc00::21 delete /sbin/ifconfig lo11 inet 169.254.0.22 delete /sbin/ifconfig lo11 inet6 fc00::22 delete /sbin/ifconfig lo11 inet 169.254.0.23 delete /sbin/ifconfig lo11 inet6 fc00::23 delete /sbin/ifconfig lo11 inet 169.254.0.24 delete /sbin/ifconfig lo11 inet6 fc00::24 delete /sbin/ifconfig lo11 inet 127.0.0.1 delete /sbin/ifconfig lo11 inet6 ::1 delete /sbin/ifconfig pflog11 destroy /sbin/ifconfig pflog12 destroy /sbin/ifconfig pflog13 destroy /sbin/ifconfig lo11 destroy rm -f stamp-ifconfig PASS sys/net/pflog Duration 0m26.18s