<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Tracing Blocks&#x2F;Understanding Logs]]></title><description><![CDATA[<p dir="auto">I've been spoiled by my work's web gateway which allows me to perform a real-time trace on traffic from a host and see what rules are causing the block for each uri.  Is there any way to do this with pfblockerng's logs?</p>
<p dir="auto">Alternatively, I'd like to ingest the logs into Elasticsearch.  However, to do so, I need to know what each column of the logs is for.  For example, dnsbl.log:</p>
<pre><code>DNSBL-HTTPS,Jul 28 12:11:10,settings-win.data.microsoft.com,192.168.1.225,Unknown,DNSBL,DNSBL_Shallalist,settings-win.data.microsoft.com,Shallalist_tracker,-
</code></pre>
<p dir="auto">I can guess at most of the columns but I'd like a concrete understanding of what each column is.</p>
<p dir="auto">This has all stemmed from my inability to use Amazon Prime Video consistently.  Sometimes it will say 'video unavailable please wait' then I look at logs and I can't readily identify the block.  However, if I change my DNS to 8.8.8.8, it works perfectly.  I'm getting ready to move in with the g/f and the last thing I want to hear is cries about shit not working and not able to quickly remedy the issue.</p>
<p dir="auto"><strong>Edit:</strong>  I should probably mention that my inconsistent results may be because I am using a smart dns to get around MLB.tv region blackouts and I am also blocking traffic in/out to everywhere except NA</p>
]]></description><link>https://forum.netgate.com/topic/145287/tracing-blocks-understanding-logs</link><generator>RSS for Node</generator><lastBuildDate>Fri, 17 Jul 2026 05:20:43 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/145287.rss" rel="self" type="application/rss+xml"/><pubDate>Sun, 28 Jul 2019 17:53:03 GMT</pubDate><ttl>60</ttl></channel></rss>