iptables packet logging

[stirling]

Does anyone know how to do packet logging with iptables?
For further study, I want to capture the full packets of those that match my rules.
Is this even possible w/o external programs? If not, which ones would you recommend?
I've currently got snort logging, but it's too much work to sync it with my iptables rules.

 

[n0cmonkey]

snort is your best bet. Write your snort filters to match the iptables ones. Shouldnt be tough.