Performing connection logging, I can do it using stack=ct1:NFCT,ip2str1:IP2STR,print1:PRINTFLOW,emu1:LOGEMU However, this generates readable messages, which I do not need, but some type of "compressed" output, to be examined later on. Actually, I use gzip on the logfiles, but is there a method to have either "binary" or othrwise "compressed" output ? Cheers, Reiner Otto ----- No virus found in this message. Checked by AVG - www.avg.com Version: 2014.0.4800 / Virus Database: 4311/10004 - Release Date: 06/12/15 Internal Virus Database is out of date. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html