> You could log the event, and monitor the log with a > tail -f logfile | ... > to turn it off. No extension needed. > -- > Cameron Simpson <cs@xxxxxxxxxx> DoD#743 > http://www.cskk.ezoshosting.com/cs/ I just discovered the iptables ULOG target, which sends packets to user space through a netlink socket. I may try to convert it into an ebtables watcher, but I will experiment with iptables ULOG first, to see how easy it is to use. -- Dan Eble <dane@xxxxxxxxxx> _____ . | _ |/| Applied Innovation Inc. | |_| | | "All Protocols MUST be odd" http://www.aiinet.com/ |__/|_|_| -- RFC 1661 (PPP)