Try my patch: It adds uid and gid (if applicable) of the socket that sent the packet. It will show you who is sending whcih packets. It would be easy to add the information about the process that handles that packet (if applicable) http://www.soltysiak.com/linux/LOG-ids.patch Regards, Maciej