Dropped traffic identification

RouterOS General
1

Hello,

I have nearly 200 rules in my firewall and I see traffic being dropped in my final drop rule. I would like to know which kind of traffic is being dropped there in an easy way. How do you identify your dropped packets? Suggestions accepted :slight_smile:

Thanks in advance!

2

Add action=log log-prefix=DROPPED_TRAFFIC, just before the action=drop rule.

3

Glups… I should have thought about that! :confused:

It will show a lot of information, but I believe that I may be able to enable the rule for a while, analyze some traffic and disable it afterwards. Doing it some times and should get a view of what’s being blocked and why :slight_smile:

Thanks!