i'm getting a lot of messages like

Oct 10 06:28:49 localhost kernel: IN=eth0 OUT= MAC=<snip> SRC=192.168.1.1 DST=192.168.1.255 LEN=147 TOS=0x00 PREC=0x00 TTL=150 ID=0 PROTO=UDP SPT=9600 DPT=162 LEN=127

in "/var/log/messages" and at all of the virtual consoles. what package monitors network traffic like this? i removed snort because i thought that it was the culprit, but i still get the messages. i installed a counter strike server, so i get a lot of pings requesting the status of the server. i just want to ignore (get rid of) these messages for now.

thanks.

ok, i found the culprit. it is firestarter, a firewall tool.

You can stop these messages from showing up in console with "dmesg -n1", which you can put to some init script. If you find out how to prevent them from cluttering log messages, please let us know.

I wouldn't really say that it's Firestarter that is the reason for the messeges - don't shoot the messenger... I had a similar "problem" with Guarddog as the firewall, check out this thread for details.

/TLV

I found a better way than "dmesg -n1". I installed the "ulogd" package and added the lineto /etc/default/firehol. Then I rebooted and now all firewall log messages go to /var/log/ulog/syslogemu.log (instead of cluttering console or system log messages).

That works with my FireHOL firewall. You need to consult ulogd documentation if you want to find out how to make it work with other firewalls, such as Firestarter or Guarddog.

I don't know if anyone was looking for a way to get these messages to stop for firestarter or shorewall (besides using "dmesg -n1" in a startup script), but I was. I found this to be useful.

For Debian it says edit /etc/init.d/klogd and set KLOGD="" to KLOGD="-c 5". Works like a charm!

Though it is against my principles to adjust something at systemlevel, that effects every potential application, just to solve a specific application problem...

/TLV

I tried the Shorewall tip, but no joy, Then i tried the Firehol's one and it worked perfectly, don't know the answer, the thing is, i followed Dead Parrot's instructions, went out on an errand for half an hour, and when i came back, there were no messages whatsover.

Dead Parrot: i don't care what your loved ones say about you, you are a prince. I haven't been able to solve this problem in the 2 years i've been using Linux, good show!
Do us all a favor, and copy/paste this tip to the sticky.

Thanks, macondo, for the compliments and for making the sticky thread. It's good to share when you find something useful.

I've modified the post in your thread where I tip about FireHOL and added the bit about ulogd.