From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <zver@altlinux.org>
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on sa.int.altlinux.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.6 required=5.0 tests=BAYES_00 autolearn=ham
	version=3.2.5
Date: Fri, 3 Oct 2008 11:15:29 +0600
From: Denis Klimov <zver@altlinux.org>
To: sysadmins@lists.altlinux.org
Message-Id: <20081003111529.adcaa61e.zver@altlinux.org>
Organization: IDO
X-Mailer: Sylpheed version 2.2.9 (GTK+ 2.12.11; x86_64-alt-linux-gnu)
Mime-Version: 1.0
Content-Type: text/plain; charset=KOI8-R
Content-Transfer-Encoding: 8bit
Subject: [Sysadmins] =?koi8-r?b?0MHLxdTZLCDLz9TP0tnFIMnE1dQg0yDQ0s/a0sHe?=
 =?koi8-r?b?zs/HzyDQ0s/L08k=?=
X-BeenThere: sysadmins@lists.altlinux.org
X-Mailman-Version: 2.1.10b3
Precedence: list
Reply-To: ALT Linux sysadmin discuss <sysadmins@lists.altlinux.org>
List-Id: ALT Linux sysadmin discuss <sysadmins.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/listinfo/sysadmins>,
	<mailto:sysadmins-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/sysadmins>
List-Post: <mailto:sysadmins@lists.altlinux.org>
List-Help: <mailto:sysadmins-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/sysadmins>,
	<mailto:sysadmins-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Fri, 03 Oct 2008 05:15:34 -0000
Archived-At: <http://lore.altlinux.org/sysadmins/20081003111529.adcaa61e.zver@altlinux.org/>
List-Archive: <http://lore.altlinux.org/sysadmins/>

Приветствую!
Есть такой вопрос.
На шлюзе стоит прозрачный прокси squid.

По tcpdump вижу пакеты
% tcpdump -i eth0 -nn port 80
10:52:04.712900 IP 192.168.0.20.38426 > 194.67.45.60.80: . ack 620 win 83
10:52:04.712901 IP 192.168.0.20.38426 > 194.67.45.60.80: . ack 663 win 83
10:52:04.795909 IP 129.33.13.208.80 > 192.168.0.20.57737: P 1:415(414) ack 479 win 3470
10:52:04.796191 IP 129.33.13.208.80 > 192.168.0.20.57737: P 415:909(494) ack 479 win 3470
10:52:04.796494 IP 192.168.0.20.57737 > 129.33.13.208.80: . ack 909 win 151
10:52:04.799759 IP 192.168.0.20.57737 > 129.33.13.208.80: P 479:1350(871) ack 909 win 151
10:52:04.799777 IP 129.33.13.208.80 > 192.168.0.20.57737: . ack 1350 win 3906
10:52:05.150069 IP 129.33.13.208.80 > 192.168.0.20.57737: P 909:1333(424) ack 1350 win 3906
10:52:05.150667 IP 129.33.13.208.80 > 192.168.0.20.57737: P 1333:2058(725) ack 1350 win 3906
10:52:05.150898 IP 192.168.0.20.57737 > 129.33.13.208.80: . ack 2058 win 173

Как мне эти пакеты завести в ULOG?
Пробовал различные вариации..


--
Климов Денис
zver