On Thu, 2012-04-12 at 16:25 +0000, Vishal Jumar wrote: > iptables -A INPUT -m state --state INVALID -j LOG --log-prefix " > Invalid NOT DROPPED" ... > How can I view the packet that this rule match is originating? You may be able to use ulogd as the target instead. The following website might help; it describes capturing strange packets and examining them later with wireshark. http://rm-rf.ca/blog/fun-iptables-ulogd-and-wireshark Andy -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
