I think you have to set the log level to DEBUG, so you can see it on '/var/log/syslog' ${PROG} ... ... -j LOG --log-level DEBUG --log-prefix "Blaster portscan " -- Henrique G. Abreu henrique@turbokit.com.br