Shorewall users - Mar 2002 - iptables syslogging

Where would I look to tweak the format of the syslog entries generated by
Shorewall / iptables?

Mar  5 07:48:06 flg2 kernel: Shorewall:loc2loc:REJECT:IN=eth1 OUTMAC=00:a0:cc:
3a:2b:09:08:00:69:05:9e:23:08:00 SRC=192.9.212.1 DST=192.168.0.100 LEN=60
TOS=0x
00 PREC=0x00 TTL=254 ID=13141 DF PROTO=UDP SPT=32768 DPT=53 LEN=40
Mar  5 07:48:10 flg2 kernel: Shorewall:loc2loc:REJECT:IN=eth1 OUTMAC=00:a0:cc:
3a:2b:09:08:00:69:05:9e:23:08:00 SRC=192.9.212.1 DST=192.168.0.100 LEN=60
TOS=0x
00 PREC=0x00 TTL=254 ID=13142 DF PROTO=UDP SPT=32768 DPT=53 LEN=40

I''m running logcheck (http://www.psionic.com) every hour, and the
format of
the iptables syslog entries is a bit verbose for my needs.  I don''t
care
about much beyond IP addresses, ports, and protocol.  I don''t really
care
about the MAC addresses, or the LEN, TOS, PREC, TTL, or ID ... is it
possible to tweak the output?

Thanks,
Scott

Scott,

----- Original Message -----
From: "Scott Merrill" <smerrill@finelinegraphics.com>
To: <shorewall-users@shorewall.net>
Sent: Tuesday, March 05, 2002 5:27 AM
Subject: [Shorewall-users] iptables syslogging

> Where would I look to tweak the format of the syslog entries generated by
> Shorewall / iptables?
The kernel source code in net/ipv4/netfilter -- the content of these
messages is hard-coded.
>
> I''m running logcheck (http://www.psionic.com) every hour, and the
format
of
> the iptables syslog entries is a bit verbose for my needs.  I
don''t care
> about much beyond IP addresses, ports, and protocol.  I don''t
really care
> about the MAC addresses, or the LEN, TOS, PREC, TTL, or ID ... is it
> possible to tweak the output?
Can you pipe the output of logcheck through an awk script that prunes the
messages to your liking?.

-Tom
--
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://www.shorewall.net
ICQ: #60745924  \ teastep@shorewall.net