Hello, MargoAndTodd a écrit : > > How do I determine the "state" from from this logged packet? > > kernel: dsl-out Everything Else IN= OUT=eth1 SRC=192.168.1.46 > DST=xxx.yyy.zzz.www LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=52504 DF > PROTO=TCP SPT=60588 DPT=52423 WINDOW=5840 RES=0x00 SYN URGP=0 LOG does not report the conntrack state. You can create different rules with different --log-prefix chains for each state. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html