>Number:         5869
>Category:       kern
>Synopsis:       ip filtering with "keep state" logs too much
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    kern-bug-people (Kernel Bug People)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Jul 28 20:20:01 1998
>Last-Modified:
>Originator:     Michael Graff
>Organization:
flame.org:  yes, we do know everything
>Release:        NetBSD 1.3.2
>Environment:
	
System: NetBSD moghedien.lh.vix.com 1.3.2 NetBSD 1.3.2 (FLAME) #1: Thu Jul 9 00:31:43 PDT 1998 explorer@moghedien.lh.vix.com:/amd/kechara/u1/OS/NetBSD/src/sys/arch/i386/compile/FLAME i386


>Description:
With lines like:

	pass in log quick proto tcp from any to any port = 25 keep state

_all_ packets are logged on that stream.

What would be nice I think is to have a "log-only" to not set the log
bit in the state table, and a "log-state" to only log this packet and
other state transition packets.

>How-To-Repeat:
	
>Fix:
	
>Audit-Trail:
>Unformatted: