On Fri, April 21, 2006 09:36, robee wrote:
>>> but i want only this:
>>> Apr 21 04:09:20 master kernel: HTTP_IN=eth2 OUT=eth0 SRC=10.11.9.2
>>> DST=213.54.82.29
>>> any sugestion?
>> AFAIK that isn't possible.
>> Why would you want to anyway ?
>> Gr,
>> Rob
>
>
> less data to write, less disk load
It must be a really busy box if this is going to hog your disk space|IO.
If you use the limit match ("-m limit --limit 1/sec" or something) your
logging will also be less.
Gr,
Rob
