1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Logging inbound and outbound traffic

Discussion in 'Tomato Firmware' started by hpsmartyz, Oct 7, 2007.

  1. hpsmartyz

    hpsmartyz LI Guru Member

    Hi,

    I have just installed a syslog-ng process on my syno, capturing the logs
    of the wrt and, looking at them, something puzzles me (which I in fact had already noticed while logs where local only)
    I enabled the log of both accepted and droped in and out traffic but
    the logs only show drop/in and accept/out.
    Is this normal?
    I am surfing on the net so I guess there is at least some accepted/in ... :confused:
    Am I missing something?

    thanks
     
  2. hpsmartyz

    hpsmartyz LI Guru Member

    up

    any hint on this?
    thank you very much
     
  3. mikester

    mikester Network Guru Member

    its normal - you want something like wallwatcher to view actual traffic
     
  4. hpsmartyz

    hpsmartyz LI Guru Member

    Hi,

    thanks for your answer
    but i'am still a bit puzzled.
    The drop down list says "If blocked by firewall", "If allowed by firewall", "Both".
    When selecting "Both" I expect to see in the logs both the allowed and blocked traffic by the firewall but only see the blocked for inbound and accepted for outbound.
    So?

    wallwatcher (i'll prefer cacti on linux ;-) ) does graphs, I do not know how this will
    change what is written in the logs.

    thx
     
  5. mraneri

    mraneri LI Guru Member

    Not sure... Turn off blocked, and show only allowed... Do you get any packets when you surf?

    Check the log in the router too.
     
  6. Odin-60

    Odin-60 LI Guru Member

    Unless you are running some kind of server, all connection requests
    from outside are necessarily dropped. OTOH, all outgoing connection
    requests are normally satisfied, unless you are explicitly blocking some
    particular stuff.
     
  7. hpsmartyz

    hpsmartyz LI Guru Member

    hi,

    thanks for you feedback.
    This is now clearer to me and so what I notice seem indeed normal.
     

Share This Page