Thanks Pablo. This worked: sysctl net.netfilter.nf_log.2=nf_log_ipv4 Now I'm getting TRACE messages in system log. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html