pflog
October 14, 2017
To monitor all packets loged when using pflog, use:
tcpdump -n -e -ttt -i pflog0
To find the rule by number:
pfctl -vvsr
For nat:
pfctl -vvsn
In macOS to create the pflog0
interface:
sudo ifconfig pflog0 create
You can remove it with:
sudo ifconfig pflog0 destroy