Requirements
<ul>
	<li><code>modprobe ipt_LOG</code></li>
	<li><code>sysctl net.netfilter.nf_log.2 = ipt_LOG</code></li>
	<li>sudoers rules
		<ul>
			<li><code><i>USER</i> ALL=(root) NOPASSWD: /sbin/iptables-save ""</code></li>
			<li><code><i>USER</i> ALL=(root) NOPASSWD: /sbin/iptables -t raw -F *</code></li>
			<li><code><i>USER</i> ALL=(root) NOPASSWD: /sbin/iptables -t raw -A * -j TRACE</code></li>
			<li><code><i>USER</i> ALL=(root) NOPASSWD: /sbin/sysctl net.netfilter.nf_log.2=ipt_LOG</code></li>
		</ul>
		Where <code><i>USER</i></code> is unix user running ajax.php script (eg. www-data for apache)
	</li>
	<li>backend component:
		<ul>
			<li>webserver
				<ul>
					<li>you need a php-enabled webserver to run ajax.php, or</li>
					<li>use php 5.4 embeded webserver by invoking this command in folder where you unpacked files:<br/>
					<code>sudo -u USER php -S localhost:8080 -t .</code></li>
				</ul>
			</li>
			<li>configure <code>$logfile</code> in ajax.php to point to file iptables is logging in (eg. /var/log/kern.log)</li>
				<ul>
					<li>you can setup rsyslog to separate iptables' log messages:<br/>
					<code>
					<pre>:msg, regex, "^\[[ ]*[0-9]*\.[0-9]*\] Firewall: "  -/var/log/iptables.log
&amp; ~
:msg, regex, "^\[[ ]*[0-9]*\.[0-9]*\] TRACE: "     -/var/log/iptables.log
&amp; ~
</pre>
					</code>
					</li>
				</ul>
		</ul>
	</li>
	<li>read access to <code>$logfile</code> for <code><i>USER</i></code> (eg. <code>chmod +r $logfile</code>)</li>
	<li>frontend component:
		<ul>
			<li>point AJAXURL variable to the right URL in JS code</li>
			<li>jquery.js</li>
			<li>jquery-ui.js</li>
		</ul>
	</li>
	<li>do not modify firewall while tracing</li>
</ul>

Usage
<ul>
	<li>Specity filter options in Filter box or leave empty to trace all packets.</li>
	<li>Pay attention to <i>limit</i> parameter, too high limit may lead to high load on target system!</li>
	<li>Press "TRACE!" to start tracing and "Stop" to finish it.</li>
	<li>The programm polls server every 1.5 sec for new trace results, you can press "Refresh" to poll them manually.</li>

	<li>Messages box: status and error messages from server</li>

	<li>During trace packet IDs will appear in Packets box.
	Click on a packet ID to display steps in Trace box, which packet met in its way through the firewall.</li>
	
	<li>Firewall box: iptables-save output hilighting rules with which the selected packet met.</li>
</ul>