From: Grant Taylor <gtaylor@riverviewtech.net>
To: netfilter@lists.netfilter.org
Subject: Re: netfilter log target kills the computer
Date: Wed, 17 Aug 2005 00:16:04 -0500 [thread overview]
Message-ID: <4302C814.3080307@riverviewtech.net> (raw)
In-Reply-To: <013101c5a2d5$b5f233d0$0100a8c0@newlife>
Switch to ULOG instead of LOG as LOG relies on Syslog which was *NOT* meant for high volume traffic. The other solution that I have proposed in the past is to set up TCPDump or Snort and have it sniff the headers out of packets and dump them to a log file and then post process said log file to extract what you are wanting and store it accordingly.
Grant. . . .
Ming-Ching Tiew wrote:
> Anyone notice that the log target is really too heavy ?
>
> I have seen various mishaviour to my Celeron 2.4 GHz
> machine ( fully dedicated as a firewall machine ) if I turn
> on logging. I am not sure if it is due to netfilter logging per se
> or due to me running syslogd to remote the log messages over
> the network. But in any case, once there is heavy iptabbles logging
> activities, the machine totally misbehaves.
>
> Besides the most obvious solutions ( ie to turn it off or get a faster
> computer ), any words of advise or recommendation ?
>
> Cheers.
prev parent reply other threads:[~2005-08-17 5:16 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-08-17 2:45 netfilter log target kills the computer Ming-Ching Tiew
2005-08-17 5:16 ` Grant Taylor [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4302C814.3080307@riverviewtech.net \
--to=gtaylor@riverviewtech.net \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.