You may wish to use this option in hostile environments in which you want to log firewall activity, but do not want to be open to a denial of service attack via syslog flooding. When a chain entry reaches the packet limit specified, logging is turned off for that particular entry. This is now obsolete as the firewall code automatically includes accounting facilities. The syntax for this command looks quite complicated, but it is relatively simple once you understand its structure. Flushing is used to remove all entries from the chain.
Clearing is used to zero out one or more accounting entries.
The command given can be shortened to the shortest unique form. The present version provides packet accounting with each firewall entry. If an index value is supplied, it is used to place the entry at a specific point in the chain. The search continues with the next chain entry. Each action will be recognized by the shortest unambiguous prefix.