[plug] Shorewall causing this?

skribe skribe at amber.com.au
Thu Aug 4 16:40:52 WST 2005


Hi folks:

My logs are being deluged with entries like this:

Aug  4 16:28:53 <name> kernel: BANDWIDTH_IN:IN=ethx OUT= 
MAC=xx:xx:xx:xx:xx:xx:x
x:xx:xx:xx:xx:xx:xx:xx SRC=192.168.1.x DST=192.168.1.x LEN=52 TOS=0x10 
PREC=0x00
TTL=xx ID=xx DF PROTO=TCP SPT=xx DPT=xx WINDOW=218 RES=0x00 ACK URGP=0

I know it's just network traffic from my LAN, but I have logs approaching a 1G 
and I'd rather not be logging that detailed.  Unfortunately, I can't seem to 
reduce the log level.  I presumed this was from shorewall (Debian stable) but 
I've turned the log levels in shorewall <default policy> to none and it's 
still logging.

Where else should I be looking?

skribe
-- 
Public key information available at:
http://www.amber.com.au/~skribe/publickey.html
Key fingerprint = 567A E91E E729 ACC2 4E34 CA8B FD0A F77D 8F00 EC47 

QFD:
	Quelle fucking drag.  "Jamie got stuck at Rome airport for
thirty-six hours and it was, like, totally QFD."
		-- Douglas Coupland, "Generation X: Tales for an Accelerated
		   Culture"

Xaraya Content Management Solutions http://www.xaraya.com/



More information about the plug mailing list