Natlog is a utility logging traffic through a firewall that performs source-NATting (a.k.a. POSTROUTING).
Firewalls like iptables usually offer POSTROUTING source network address translation facilities changing the source address of a host behind the firewall to the address of the host before the firewall.
The standard logs facilities provided by iptables do not easily allow us to associate addresses behind the firewall to their source-natted equivalents before the firewall. Natlog was designed to fill in that particular niche.
When running natlog, messages are sent to the syslog daemon and/or to the standard output stream showing the essential characteristics of the connection using source natting.
Natlog depends on facilities provided by iptables, but may also generate logs directly using facilities offered by the pcap library.
Dependencies:
+ g++ (>= 4.7.1), icmake (>= 7.19.00),
+ libbobcat-dev (>=3.01.00), libpcap-dev, and yodl (>=3.00.0)
Use and Download:
git clone https://github.com/fbb-git/natlog && cd natlog cd natlog ./build -q (for how to Build) ./build program
Source: https://github.com/fbb-git