You're going to hate this..
In some email I received from James Thompson, sie wrote:
[...]
> A little more info....
>
> grunt1# ipf -V
> ipf: IP Filter: v3.3.6 (192)
> Kernel: IP Filter: v3.3.6
> Running: yes
> Log Flags: 0 = none set
> Default: pass all, Logging: unavailable
^^^^^^^^^^^
Add "options IPFILTER_LOG" to your kernel config.
Darren