Re: Help with INVALID packets rule. Best way to see the actual packet isloating the rest?
|[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]|
On Thu, 2012-04-12 at 16:25 +0000, Vishal Jumar wrote: > iptables -A INPUT -m state --state INVALID -j LOG --log-prefix " > Invalid NOT DROPPED" ... > How can I view the packet that this rule match is originating? You may be able to use ulogd as the target instead. The following website might help; it describes capturing strange packets and examining them later with wireshark. http://rm-rf.ca/blog/fun-iptables-ulogd-and-wireshark Andy -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html