Hi, I'm trying to see the TRACE log by issuing the following commands: /sbin/iptables -t raw -A PREROUTING --destination 10.215.237.237 -j TRACE /sbin/iptables -t raw -A OUTPUT --destination 10.215.237.237 -j TRACE After ping'ing 10.215.237.237, I'd like to know where to look for the TRACE messages. I've looked in /var/log/messages (and other system logs) and /proc/kmsg but no sign of them. What can I try? Kernel has support for TRACE (CONFIG_NETFILTER_XT_TARGET_TRACE=m). # lsmod | grep -i trace xt_TRACE 551 0 x_tables 8695 52 xt_physdev,xt_pkttype,xt_statistic,xt_DSCP,xt_dscp,xt_iprange,xt_mark,xt_time,xt_CT,xt_helper,xt_length,xt_comment,xt_policy,xt_CHECKSUM,xt_recent,ip_tables,xt_socket,xt_tcpmss,xt_tcpudp,ipt_MASQUERADE,xt_LOGMARK,xt_condition,xt_NFQUEUE,xt_NFLOG,xt_TRACE,xt_iface,xt_ipp2p,xt_limit,xt_owner,xt_realm,xt_ACCOUNT,ipt_rpfilter,xt_connlimit,xt_conntrack,xt_IPMARK,xt_LOG,xt_mac,xt_nat,xt_set,xt_hashlimit,xt_multiport,iptable_filter,xt_CLASSIFY,xt_TARPIT,xt_TCPMSS,xt_TPROXY,xt_connmark,ipt_REJECT,xt_REDIRECT,iptable_mangle,xt_addrtype,iptable_raw I'm using syslog-ng.but I've also tried metalog: still no TRACE messages. So I guess the logger isn't to blame and there's something wrong with my kernel or netfilter installation. # uname -a Linux fw3 4.1.4-hardened #1 SMP Thu Aug 13 15:49:17 CEST 2015 i686 Intel(R) Xeon(TM) CPU 2.66GHz GenuineIntel GNU/Linux # iptables --version iptables v1.4.21 Do you need more info? What can I try? Thanks, Vieri -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
