Feature request: BSD pf monitoring

[z-eos]

BSD packet filter pf(4) has nice ctl — pfctl(8)

pfctl allows to get statistict in form of such, easyly parseble table:

> pfctl -s info  
Status: Enabled for 5 days 13:09:50           Debug: Urgent
State Table                          Total             Rate
  current entries                      920               
  searches                        65233309          136.1/s
  inserts                           576460            1.2/s
  removals                          575540            1.2/s
Counters
  match                             942134            2.0/s
  bad-offset                             0            0.0/s
  fragment                               0            0.0/s
  short                                  0            0.0/s
  normalize                              0            0.0/s
  memory                                 0            0.0/s
  bad-timestamp                          0            0.0/s
  congestion                             0            0.0/s
  ip-option                            951            0.0/s
  proto-cksum                            0            0.0/s
  state-mismatch                       143            0.0/s
  state-insert                           2            0.0/s
  state-limit                            0            0.0/s
  src-limit                              0            0.0/s
  synproxy                               0            0.0/s
  map-failed                             0            0.0/s

it looks not too hard to draw that info with RRD