Hi, Daniele Rossetti asked: > Does someone know how to sniff packets after netfilter chains?? > Because tcpdump works before any chain so it capture packets which > should be dropped by iptables and I need to sniff only the packets that > survive iptables filter I think you want ulogd and its pcap output plugin for that. Basically the idea is to log the packets you're interested in and later on analyze the ulogd logfile with tcpdump. HTH, Thomas -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
