On Tue, Aug 14, 2007 at 11:16:44AM -0700, Tom Eastep wrote: > > Shouldn't SYN_RECV appear on both? (I did notice that > > shorewall dump took *a lot* more time to complete on > > the bridge so maybe the conntrack entry got removed?) > > > > Might be -- does your bridge have an enormous log? If so, /sbin/shorewall > can take a long time wading through the entire log so it can print the last > 20 'Shorewall' messages.
That seems correctable. Pass the log through tac, use head instead of tail, and pass the output of head through tac again. ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
