On Sun, 2007-04-15 at 18:27 +0100, Alan Chandler wrote: > a) Whether wireshark sees the packets before they are processed by > IPTABLES? (I want to see if there is a possibility that they reach the > machine but iptables drops them) Yup, wireshark and tcpdump see them before they hit iptables. Regards, Torsten