Search This Blog

Saturday, July 14, 2012

Logging output UIDs.

Good time of the day.


I try to get UIDs of the processes that generate OUTPUT traffic:

/sbin/iptables -A OUTPUT -j LOG --log-uid --log-prefix OUTPT->
--log-level 2

But I do not get the UIDs:

OUTPT->IN= OUT=br0 SRC=XXXX DST=ZZZZ LEN=52 TOS=0x00
PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=48282 DPT=9001 WINDOW=842
RES=0x00 ACK URGP=0

I tried w/ log level 1 and others - still no luck.

Also, may You know the answer to my curiocity, Why I can not locate '-j
LOG' in above iptables rule at the end of the rule? - For iptables
complains about unknown '--log-uid'. - I understand that something is
then missing before the sufix, but from iptables man. it is not evident
to me what.


Thanks for Your time.


--
To UNSUBSCRIBE, email to debian-firewall-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: http://lists.debian.org/50011b8a.8790980a.5d82.ffff8994@mx.google.com

No comments: