path: root/userspace/ebtables2/ebtables.8
diff options
authorBart De Schuymer <>2008-03-17 22:10:49 +0000
committerBart De Schuymer <>2008-03-17 22:10:49 +0000
commite6affb52588618ee2e142247462bf17899e5e58c (patch)
tree952129d1ae77344fcede8d4c05dc9900922c6628 /userspace/ebtables2/ebtables.8
parentb23464c551d39becaef3cf42aabb7a710287274b (diff)
add ebtables nflog support (Peter Warasin)
Diffstat (limited to 'userspace/ebtables2/ebtables.8')
1 files changed, 35 insertions, 0 deletions
diff --git a/userspace/ebtables2/ebtables.8 b/userspace/ebtables2/ebtables.8
index 469f9ec..957c445 100644
--- a/userspace/ebtables2/ebtables.8
+++ b/userspace/ebtables2/ebtables.8
@@ -857,6 +857,41 @@ the rule. The default is no ipv6 information logging.
Will log the (r)arp information when a frame made by the (r)arp protocols
matches the rule. The default is no (r)arp information logging.
+.SS nflog
+The nflog watcher passes the packet to the loaded logging backend
+in order to log the packet. This is usually used in combination with
+nfnetlink_log as logging backend, which will multicast the packet
+through a
+.IR netlink
+socket to the specified multicast group. One or more userspace processes
+may subscribe to the group to receive the packets.
+.B "--nflog"
+Log with the default logging options
+.B --nflog-group "\fInlgroup\fP"
+The netlink group (1 - 2^32-1) to which packets are (only applicable for
+nfnetlink_log). The default value is 1.
+.B --nflog-prefix "\fIprefix\fP"
+A prefix string to include in the log message, up to 30 characters
+long, useful for distinguishing messages in the logs.
+.B --nflog-range "\fIsize\fP"
+The number of bytes to be copied to userspace (only applicable for
+nfnetlink_log). nfnetlink_log instances may specify their own
+range, this option overrides it.
+.B --nflog-threshold "\fIsize\fP"
+Number of packets to queue inside the kernel before sending them
+to userspace (only applicable for nfnetlink_log). Higher values
+result in less overhead per packet, but increase delay until the
+packets reach userspace. The default value is 1.
.SS ulog
The ulog watcher passes the packet to a userspace
logging daemon using netlink multicast sockets. This differs