Curious. Is Firewall > Diagnostics > Aliases supposed to contain no packet or byte data? Or am I missing a setting somewhere?
I don't know if you're missing it, but it would be "Statistics" under the alias config. Stats gathering from pf is a bit wonky, so there will be limitations. (I haven't examined them fully, but block rules don't appear to count, for instance.)
Quote from: pfry on August 06, 2025, 03:00:30 PMI don't know if you're missing it, but it would be "Statistics" under the alias config. Stats gathering from pf is a bit wonky, so there will be limitations. (I haven't examined them fully, but block rules don't appear to count, for instance.)
I did miss this so thank you for the info.
Can I enable this for all and everything or will this impact load or disk or whatever too negatively?
Quote from: nerd on August 06, 2025, 03:24:24 PM[...]
Can I enable this for all and everything or will this impact load or disk or whatever too negatively?
Good question. The count variables are likely fixed structure elements, so the only impact should be a bit of CPU - a miniscule bit compared to, say, netflow, IPS, etc. (I haven't tested it.)
I only enable stats on aliases that are used with pass rules (those that will actually count). I rarely read them, but what the hey.
gotcha.
So I went ahead and checked the statistics checkbox for a couple of my aliases. I.e. I enabled this for my PC's alias (2x IPv4 + 2x IPv6).
But now multiple hours later, I still get no packet or byte values to show in Firewall > Diagnostics > Aliases.
Quote from: nerd on August 07, 2025, 06:23:42 PM[...]
So I went ahead and checked the statistics checkbox [...]
I have to ask, you understand: Did you apply the changes? If so, you got me.
Quote from: pfry on August 07, 2025, 06:52:21 PMI have to ask, you understand: Did you apply the changes? If so, you got me.
hehe, fair question, but yes.. i did save and apply.