one line of iptable log is:
Jan 1 21:41:19 x kernel: [838760.885218] IPTables-Dropped: IN=eth0 OUT= MAC=x:x:x:x:x:x:x:x:x:x:x:x:x:x:x:x:00:x:00:00:x:00:x:x:x:x SRC=x.x.x.x DST=x.x.x.x LEN=70 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=37739 DPT=53 LEN=50
and to watch it live , i used :
but as you can see, it contains a lot of information in it. so i tried to view only source and destination field of that line.
I changed my command to some thing like this :
tailf /var/log/kern.log | sed -n -e 's/^.*DST: //p'
but still nothing, Is there any way i can change it to show me only source and destination IP addresses? or should i go to more complicated solution than a command.