Re: Change iptables log format (would be a nice feature)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Thanks very much

--
Lasse B. Jensen

On Wed, 8 Oct 2003, Harald Welte wrote:

> On Wed, Oct 08, 2003 at 12:11:46PM +0200, Lasse B. Jensen wrote:
> > 
> > On Tue, 7 Oct 2003, Harald Welte wrote:
> > 
> > > On Mon, Oct 06, 2003 at 12:12:26PM -0400, Chris Brenton wrote:
> > > > On Thu, 2003-10-02 at 10:40, Lasse B. Jensen wrote:
> > > > >
> > > > > Is it possible to change the log format of iptables?
> > > > 
> > > > As others have pointed out this is not possible, however it might make a
> > > > nice feature to be added in. I've noticed that in high bandwidth
> > > > environments what chokes throughput the most is logging. 
> > > 
> > > This is why you should use ULOG / ulogd if you log many packets.
> > 
> > I have now tried with ulog and ulogd and got a much better performance.... 
> > however i seem that the timestamp i ulog i "fucked up". My time on the 
> > machine i fine, but the ulog timestamp says Jan 12 00.04.02 when the 
> > date-output says Okt 8 11.43.22 
> > 
> > Can anyone give me an explanation?
> 
> the answer is in the ulogd@xxxxxxxxxxxxxxxxxx mailinglist archive, there
> is also a patch for it (in ulogd CVS).  I'm about to release ulogd-1.02
> because of that bug.
> 
> > /Lasse
> 
> -- 
> - Harald Welte <laforge@xxxxxxxxxxxxx>             http://www.netfilter.org/
> ============================================================================
>   "Fragmentation is like classful addressing -- an interesting early
>    architectural error that shows how much experimentation was going
>    on while IP was being designed."                    -- Paul Vixie
> 


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux