Index for Section 8

Alphabetical listing for P

pfconfig(8)
NAME
  pfconfig - Configure packet filter parameters

SYNOPSIS
  /usr/sbin/pfconfig [ +/-p [ romisc ] ] [ +/-c [ opyall ] ] [ -b [ acklog ]
  nnn ] [ -a [ ll ] ] [ interface-name ... ]

DESCRIPTION
  The pfconfig command allows the system manager to configure certain
  parameters of the packet filter driver (see packetfilter(7)).	 These
  parameters are configured separately for each interface; the interfaces are
  specified by name on the command line (for example, ln0, and ni1).  If more
  than one interface is specified, they are all given the same settings.
  Alternatively, you can specify -all to configure all the packet-filter
  interfaces on the system.

  You can set the following parameters with pfconfig:

  +promisc
      Allows packet filter users to set the interface into promiscuous mode
      (receives all packets).  Whenever there is at least one packet filter
      descriptor open with the ENPROMISC mode bit set, the interface is put
      into promiscuous mode.  When no such descriptors are in use, the
      interface is returned to normal mode.

  -promisc
      The interface is no longer put into promiscuous mode on behalf of
      packet filter users; if the interface is in promiscuous mode when this
      command is given, it is returned to normal mode.	(The superuser may
      use ifconfig(8) to control promiscuous mode, overriding the mode set by
      non-superusers.  This is the default setting.)

  +copyall
      Allows packet filter users to set the interface into copy-all mode
      (receives packets sent/received by the kernel-resident protocol
      software [for example, IP, ARP, DECnet, LAT] on this host).  Whenever
      there is at least one packet filter descriptor open with the ENCOPYALL
      mode bit set, the interface is put into copy-all mode.  When no such
      descriptors are in use, the interface is returned to normal mode.

  -copyall
      The interface is no longer put into copy-all mode on behalf of packet
      filter users; if the interface is in copy-all mode when this command is
      given, it is returned to normal mode.  (The superuser may use
      ifconfig(8) to control copy-all mode, overriding the mode set by non-
      superusers.  This is the default setting.)

  -backlog nnn
      Sets the maximum backlog (packet filter input queue length) for non-
      superuser descriptors to the specified number.  When a descriptor is
      opened, it is given a queue length limit of two. An application can
      increase this backlog using the EIOCSETW ioctl request.  Superusers are
      allowed to increase their backlog up to a system-wide maximum; non-
      superusers are allowed to increase their backlog only up to the maximum
      set by this program.  Note that allowing too large a backlog may result
      in vast amounts of kernel memory being tied up in the packet filter
      driver queues.

      If no configuration parameters are specified, the pfconfig command
      displays the current packet filter configuration for the network
      interfaces.

      Only the superuser may use this command to change the configuration.

ERRORS
  Messages indicating the specified interface does not exist; an attempt to
  set a maximum backlog less than 1 or greater than the system-wide maximum;
  the user tried to alter an interface's configuration but is not privileged.

RELATED INFORMATION
  Commands: intro(1), netstat(1), pfstat(1), ifconfig(8), inet.local(8).

  Files: bpf(7), packetfilter(7).