diff --git a/docs/FAQ.xml b/docs/FAQ.xml index ca99a8e00..60f654911 100644 --- a/docs/FAQ.xml +++ b/docs/FAQ.xml @@ -1186,7 +1186,8 @@ to debug/develop the newnat interface. LOGBURST="" It is also possible to set up - Shorewall to log all of its messages to a separate file. + Shorewall to log all of Netfilter's messages to a separate + file.
(FAQ 6a) Are there any log parsers that work with @@ -1254,6 +1255,17 @@ DROP net fw udp 10619</programlisting> - udp 10619</programlisting> </section> + <section id="faq6c"> + <title>(FAQ 6c) cat /proc/sys/kernel/prink returns '4 4 1 7' and still + I get dmesg filled up + + Answer: While we would argue + that 'dmesg filled up' is not necessarily a problem, the only way to + eliminate that is to set up + Shorewall to log all of Netfilter's messages to a separate + file. +
+
(FAQ 6d) Why is the MAC address in Shorewall log messages so long? I thought MAC addresses were only 6 bytes in length.