John Lange wrote: >I sent this to the list yesterday but I don't think it made it through. >Apologies if it is a duplicate. > >Here are patches against the userspace and the kernel which allows the >logging of the uid that generated the (outgoing) packet. > >This patch was originally the work of Martin Josefsson for the 2.4 >kernel but was never incorporated into the main code base. My work here >simply ports it to the 2.6 kernel and the current version of netfilter >(iptables). > Thanks, I've fixed locking (packets with skb->sk set may reach ipt_LOG without the socket lock held through tunnel devices, so we need extra locking) and added this patch to my tree. I'm going to add the userspace patch when SVN is up again. Regards Patrick