[Shorewall-users] iptables syslogging

Tom Eastep
Tue, 05 Mar 2002 15:23:26 -0000

Scott,

----- Original Message -----
From: "Scott Merrill" <smerrill@finelinegraphics.com>
To: <shorewall-users@shorewall.net>
Sent: Tuesday, March 05, 2002 5:27 AM
Subject: [Shorewall-users] iptables syslogging


> Where would I look to tweak the format of the syslog entries generated by
> Shorewall / iptables?

The kernel source code in net/ipv4/netfilter -- the content of these
messages is hard-coded.

>
> I''m running logcheck (http://www.psionic.com) every hour, and the
format
of
> the iptables syslog entries is a bit verbose for my needs.  I
don''t care
> about much beyond IP addresses, ports, and protocol.  I don''t
really care
> about the MAC addresses, or the LEN, TOS, PREC, TTL, or ID ... is it
> possible to tweak the output?

Can you pipe the output of logcheck through an awk script that prunes the
messages to your liking?.

-Tom
--
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://www.shorewall.net
ICQ: #60745924  \ teastep@shorewall.net