Re: Filter log results
Arnaud Girsch (girsch@marben.com)
Tue, 10 Dec 1996 23:28:17 -0800 (PST)
> When a packet hits a filter rule which causes it to be logged, is there
> currently a way to get the portmaster to log the port from which the packet
> originated or to which it was destined?
>
> Currently, the behavior is only to log the originating and destination
> addresses, the sequence numbers, the ack, the win, and what TCP flags
> were set, etc, etc. Which leaves us 30 or 46 people who could have
> caused the rule to log.
errr .... It's already there.
The src/dst #IP is followed by the port. Look at (for example):
Apr 11 01:05:06 router-gw 28 deny: UDP from 130.237.226.85.3685 to W.X.Y.Z.518
And you have the same behaviour for TCP.
Arnaud.
--
Arnaud Girsch -+- agirsch@marben.com -+- Marben Products, Inc. - San Jose, CA