Constantin Gavrilescu wrote:
> Exista un utilitar care sa-mi urmareasca pachetele marcate un un anumit
> numar din iptables? Vreau un program care sa faca asta in timp real,
> fara -j LOG.
exista -j ULOG, dupa care pot fi urmarite cu programe din userspace.

si exista si tabela raw pentru care se ofera ( la 
http://www.netfilter.org/patch-o-matic/pom-extra.html#pom-extra-TRACE ):


The TRACE target can be used to trace how the packet "flows trough"
your tables and rules. When a packet marked with the TRACE target
matches any rule, the system logs the packet with the following
prefix:

        TRACE: tablename/chainname/rulenum packet

Raspunde prin e-mail lui