PFSTATD(8)

NAME
pfstatd - small daemon providing pf statistics over network

SYNOPSIS
pfstatd [-d] [-a address] [-p port] [-u user]

DESCRIPTION
The pfstatd daemon queries statistics from the packet filter device pf(4) and returns them in text form to network clients (like pfstat) connecting through TCP.

The options are as follows:

-d  Do not detach from terminal, but stay in foreground and print debug messages to stdout.

-a address
    Accept TCP connections on the specified address only. Default is to accept connections on any address.

-p port
    Listen for TCP connection on the specified port. Default is port 9999.

-u user
    When started as root, drop privileges to the specified user, after opening the device special file /dev/pf. Default is ‘nobody’.

SECURITY CONSIDERATIONS
Clients are not authenticated and output is not encrypted. The daemon does not read input from clients and immediately closes connections after writing its output. The daemon requires read (but not write) access to the device special file /dev/pf. The client supports only one concurrent TCP connection, and accepts no more than one connection per second.

SEE ALSO
pf(4), pfstat(8)