What is pfd?

pfd works alongside pfctl and the PF firewall on macOS.

What is pfd?

pfd is the PF (Packet Filter) logging daemon. While pfctl sets the firewall rules, pfd writes log entries when packets match those rules.

Is it running on my Mac?

pfd only runs if PF logging is turned on. On a standard Mac without custom PF rules, it is not active. Apps that use PF for filtering (some VPNs and firewalls) may turn on logging, which starts pfd.

What does it log?

When active, pfd records details about network packets that match PF rules marked for logging. This includes source and destination addresses, ports, protocols, and the action taken (blocked or allowed).

Do I need it?

Only if you use PF firewall rules with logging turned on. Most Mac users rely on the built-in application firewall in System Settings and never touch PF directly.

Should you worry?

No. It is a standard BSD networking part of macOS. If it is running and you did not set up PF rules, check whether a VPN or firewall app is using PF.

Enjoyed this post?

Well, you could share the post with others, follow me with RSS Feeds and/or send me a comment via email.

Tags