On Mon, Oct 03, 2005 at 02:32:40PM +0200, Henrik Nordstrom wrote: > ><timestamp> <localnet address> uses external connection as <external IP> > >.... > ><timestamp> <localnet address> releases <external IP> > > Some of this is provided by the newly released conntrack tool. > > http://www.netfilter.org/news.html#2005-09-24 > > Regards > Henrik Thanks! According to the conntrack.8 it seems promising. However, are there any docs about what information I could get in event log? p.o.