[Shorewall-users] iptables syslogging

Scott Merrill
Tue, 05 Mar 2002 13:27:06 -0000

Where would I look to tweak the format of the syslog entries generated by
Shorewall / iptables?

Mar  5 07:48:06 flg2 kernel: Shorewall:loc2loc:REJECT:IN=eth1 OUTMAC=00:a0:cc:
3a:2b:09:08:00:69:05:9e:23:08:00 SRC=192.9.212.1 DST=192.168.0.100 LEN=60
TOS=0x
00 PREC=0x00 TTL=254 ID=13141 DF PROTO=UDP SPT=32768 DPT=53 LEN=40
Mar  5 07:48:10 flg2 kernel: Shorewall:loc2loc:REJECT:IN=eth1 OUTMAC=00:a0:cc:
3a:2b:09:08:00:69:05:9e:23:08:00 SRC=192.9.212.1 DST=192.168.0.100 LEN=60
TOS=0x
00 PREC=0x00 TTL=254 ID=13142 DF PROTO=UDP SPT=32768 DPT=53 LEN=40

I''m running logcheck (http://www.psionic.com) every hour, and the
format of
the iptables syslog entries is a bit verbose for my needs.  I don''t
care
about much beyond IP addresses, ports, and protocol.  I don''t really
care
about the MAC addresses, or the LEN, TOS, PREC, TTL, or ID ... is it
possible to tweak the output?

Thanks,
Scott