Re: Logging only the first 20 packets of a new connection

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Jan 07, 2005 at 01:29:28PM -0500, Deepak Seshadri wrote:
> Hello everybody,
> 
> Could someone suggest how would I log only the first 15 or 20 packets of any
> new connection?

this should now be possible using ipt_connbytes.

iptables -A FORWARD -j ULOG -m connbytes --connbytes 0:15 --connbytes-dir both --connbytes-mode packets

-- 
- Harald Welte <laforge@xxxxxxxxxxxxx>             http://www.netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

Attachment: signature.asc
Description: Digital signature


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux