On Wed, 26 Mar 2003 17:13:51 -0600, Miguel M wrote > >Anyone have any ideas on how I can get the -j LOG action put the > >results in /var/log/packets rather than as kernel in /var/log/messages? > > Hi Mike! > > A very simple example that you can later integrate to your firewall. > Watch out for the size of /var/log/packets: I will just add the appropriate stuff to logrotate (much as I am doing now for messages). > > # touch /var/log/packets > # echo "kern.debug /var/log/packets" >> /etc/syslog.conf > # /sbin/iptables -A INPUT -j LOG --log-level DEBUG > # /usr/bin/tail -f /var/log/packets Interesting. kern.debug messages are ignored by default, so you use them for packet logging. Neat idea. Of course, I hope that nothing else is generating kern.debug messages .... Thank you for a quick way to solve my problem. Mike. -- Psyche-list mailing list Psyche-list@xxxxxxxxxx https://listman.redhat.com/mailman/listinfo/psyche-list
