From: Chris Brenton <cbrenton@chrisbrenton.org>
To: "Lasse B. Jensen" <gymer@odense.kollegienet.dk>
Cc: netfilter@lists.netfilter.org
Subject: Re: Change iptables log format (would be a nice feature)
Date: 06 Oct 2003 12:12:26 -0400 [thread overview]
Message-ID: <1065456746.1189.32.camel@valhalla> (raw)
In-Reply-To: <Pine.LNX.4.56L0.0310021637520.11122@sutsko.kollegie.dk>
On Thu, 2003-10-02 at 10:40, Lasse B. Jensen wrote:
>
> Is it possible to change the log format of iptables?
As others have pointed out this is not possible, however it might make a
nice feature to be added in. I've noticed that in high bandwidth
environments what chokes throughput the most is logging. This
materializes as the boxes throughput topping out quicker as well as
garbled/partial log entries being written.
I *strongly* feel that one of Netfilter's biggest strengths is the level
of detail in the logs and would hate to see that change. When your
pushing high speeds however, your choices come down to collecting
verbose info (and thus limiting throughput) or not collecting log
entries. An option that permits a terse log format (say IPs, ports &
transport only) might be a nice balance.
Just my $.02,
Chris
next prev parent reply other threads:[~2003-10-06 16:12 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-10-02 14:40 Change iptables log format Lasse B. Jensen
2003-10-05 14:08 ` Harald Welte
2003-10-06 16:12 ` Chris Brenton [this message]
2003-10-07 5:27 ` Change iptables log format (would be a nice feature) Ray Leach
2003-10-07 9:47 ` Harald Welte
2003-10-08 10:11 ` Lasse B. Jensen
2003-10-08 12:24 ` Harald Welte
2003-10-08 12:57 ` Lasse B. Jensen
2003-10-07 16:11 ` Peter Marshall
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1065456746.1189.32.camel@valhalla \
--to=cbrenton@chrisbrenton.org \
--cc=gymer@odense.kollegienet.dk \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.