PDA

Bekijk de volledige versie : how to log all traffic



scsb
30-08-2008, 08:00
How to log all possible vlan1 traffic? I've got about 100MB incoming traffic per hour when all my computers are turned off, and I can see nothing in log files.

Here's my iptables settings:


iptables -L -nv
Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 logdrop all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
0 0 LOG all -- vlan1 * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED LOG flags 7 level 4 prefix `RELEST '
93488 8915K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
5446 327K logaccept all -- lo * 0.0.0.0/0 0.0.0.0/0 state NEW
596 55480 logaccept all -- br0 * 0.0.0.0/0 0.0.0.0/0 state NEW
36 2160 logaccept tcp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:81 flags:0x16/0x02
0 0 logaccept tcp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3044 flags:0x16/0x02
20 1220 logaccept icmp -- * * 0.0.0.0/0 0.0.0.0/0
29179 2715K logdrop all -- * * 0.0.0.0/0 0.0.0.0/0

Chain FORWARD (policy ACCEPT 1066 packets, 55327 bytes)
pkts bytes target prot opt in out source destination
0 0 logaccept all -- br0 br0 0.0.0.0/0 0.0.0.0/0
0 0 logdrop all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
0 0 LOG all -- vlan1 * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED LOG flags 7 level 4 prefix `FORWARD '
43100 32M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 logdrop all -- !br0 vlan1 0.0.0.0/0 0.0.0.0/0
0 0 logaccept all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate DNAT


Any suggestions?