[gl-como] /var/log/bandwith (fedora5) O.O

[Claudio Marforio]

Il risultato del primo comando e' stato:


Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
num   pkts bytes target     prot opt in     out     source 
destination
1      368  357K LOG        all  --  eth0   *       0.0.0.0/0 
0.0.0.0/0           LOG flags 0 level 7 prefix `BANDWIDTH_IN:'
2     2305 2295K RH-Firewall-1-INPUT  all  --  *      *       0.0.0.0/0 
    0.0.0.0/0

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
num   pkts bytes target     prot opt in     out     source 
destination
1        0     0 LOG        all  --  *      eth0    0.0.0.0/0 
0.0.0.0/0           LOG flags 0 level 7 prefix `BANDWIDTH_OUT:'
2        0     0 LOG        all  --  eth0   *       0.0.0.0/0 
0.0.0.0/0           LOG flags 0 level 7 prefix `BANDWIDTH_IN:'
3        0     0 RH-Firewall-1-INPUT  all  --  *      *       0.0.0.0/0 
    0.0.0.0/0

Chain OUTPUT (policy ACCEPT 2212 packets, 1956K bytes)
num   pkts bytes target     prot opt in     out     source 
destination
1      275 19092 LOG        all  --  *      eth0    0.0.0.0/0 
0.0.0.0/0           LOG flags 0 level 7 prefix `BANDWIDTH_OUT:'

Chain RH-Firewall-1-INPUT (2 references)
[....] (qui non c'erano LOG)


Quindi e' questo che causa quell'enorme log? Come lo posso evitare? (a meno che 
sia realmente utile?)

ciop ciop


Pietro Bertera wrote:
> Il giorno gio, 11/05/2006 alle 00.00 +0200, Claudio Marforio ha scritto:
> 
>> May 10 19:19:12 shark kernel: BANDWIDTH_IN:IN=eth0 OUT= MAC= SRC=192.168.0.60 DST=192.168.0.255 LEN=96 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=137 DPT=137 LEN=76
>> May 10 19:19:12 shark kernel: BANDWIDTH_OUT:IN= OUT=eth0 SRC=192.168.0.60 DST=192.168.0.255 LEN=96 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=137 DPT=137 LEN=76
> 
> é un log creadto dal target -j LOG di iptables
> puo' essere che stai loggando i pacchetti che marchi per poi applicare
> lo shaping.
> 
> la regola la becchi con
> 
> iptables -L -n -v --line-numbers
> iptables -t nat -L -n -v --line-numbers
> iptables -t mangle -L -n -v --line-numbers
> 
> cerca quella con target LOG
> 
> ciao
> 
> 
> 
> ------------------------------------------------------------------------
> 
>