From Bugzilla Helper: User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows 98) Description of problem: When setting iptables to log packet matches, the output is sent to the console, as well the intended log file. Note that this even happens if the *only* entry in syslog.conf is for all logging to go to file, iptables data still clutters the console. How reproducible: Always Steps to Reproduce: 1. iptables -A input -i eth0 -p tcp --syn -j LOG --log-level warning 2. Set syslog entry such as *.* /var/log/logall 3. service syslog restart 4. ping the box Actual Results: iptables logging directly to console. Expected Results: No output to console, to /var/log/logall only. Additional info: Have demonstrated this on two different boxes, both low end pentiums.
Packet matching (and logging) is done in the kernel part of iptables, assigning to kernel.
Added printk "level" to the printk for logging. Should appear in rawhide in a week or so. Thanks for reporting!