summaryrefslogtreecommitdiffstats
path: root/configure.ac
Commit message (Collapse)AuthorAgeFilesLines
* build: bump release version to 2.0.8ulogd-2.0.8Pablo Neira Ayuso2022-11-021-1/+1
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: if `--enable-sqlite3` is `yes`, abort if libsqlite3 is not foundJeremy Sowden2022-01-111-2/+7
| | | | | | | | If SQLITE3 support has been explicitly requested, abort if it is not available. Signed-off-by: Jeremy Sowden <jeremy@azazel.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: if `--enable-pgsql` is `yes`, abort if libpq is not foundJeremy Sowden2022-01-111-0/+6
| | | | | | | | If PostgreSQL support has been explicitly requested, abort if it is not available. Signed-off-by: Jeremy Sowden <jeremy@azazel.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: if `--enable-pcap` is `yes`, abort if libpcap is not foundJeremy Sowden2022-01-111-0/+6
| | | | | | | | If libpcap support has been explicitly requested, abort if it is not available. Signed-off-by: Jeremy Sowden <jeremy@azazel.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: if `--enable-mysql` is `yes`, abort if libmysqlclient is not foundJeremy Sowden2022-01-111-0/+6
| | | | | | | | If MySQL support has been explicitly requested, abort if it is not available. Signed-off-by: Jeremy Sowden <jeremy@azazel.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: if `--enable-dbi` is `yes`, abort if libdbi is not foundJeremy Sowden2022-01-111-2/+7
| | | | | | | | If DBI support has been explicitly requested, abort if it is not available. Signed-off-by: Jeremy Sowden <jeremy@azazel.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: use pkg-config or pg_config for libpqJeremy Sowden2022-01-111-4/+29
| | | | | | | | Recent versions of postgresql support pkg-config. Use pkg-config if available, otherwise fall back to pg_config. Signed-off-by: Jeremy Sowden <jeremy@azazel.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: use pkg-config or pcap-config for libpcapJeremy Sowden2022-01-111-3/+27
| | | | | | | | | Recent versions of libpcap support pkg-config. Older versions provide a pcap-config script. Use pkg-config if available, otherwise fall back to pcap-config. Signed-off-by: Jeremy Sowden <jeremy@azazel.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: use pkg-config or mysql_config for libmysqlclientJeremy Sowden2022-01-111-4/+49
| | | | | | | | | Recent versions of mariadb and mysql support pkg-config. Older versions provide a mysql_config script. Use pkg-config if available, otherwise fall back to mysql_config. Signed-off-by: Jeremy Sowden <jeremy@azazel.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: use pkg-config for libdbiJeremy Sowden2022-01-111-3/+3
| | | | | | | | libdbi introduced pkg-config support in 0.9.0, which was released in 2013. Use it. Signed-off-by: Jeremy Sowden <jeremy@azazel.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: use `--enable-XYZ` options for output pluginsJeremy Sowden2022-01-111-20/+20
| | | | | | | | | | | | | Currently, we use `AC_ARG_WITH` for output plugins. However, this is not consistent with the input plugins, which use `AC_ARG_ENABLE`, and in some cases (dbi, mysql, pgsql) the macro calls in configure.ac conflict with others in acinclude.m4. Use `AC_ARG_ENABLE` instead and change the name of the option for the JSON plugin from `jansson` to `json`. Fixes: 51ba7aec8951 ("Fix automagic support of dbi, pcap and sqlite3") Fixes: c61c05c2d050 ("configure.ac: Add --without-{mysql,pgsql}") Signed-off-by: Jeremy Sowden <jeremy@azazel.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: bump libnetfilter_log dependencyJeremy Sowden2021-12-061-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Recent changes to add conntrack info to the NFLOG output plug-in rely on symbols only present in the headers provided by libnetfilter-log v1.0.2: CC ulogd_inppkt_NFLOG.lo ulogd_inppkt_NFLOG.c: In function 'build_ct': ulogd_inppkt_NFLOG.c:346:34: error: 'NFULA_CT' undeclared (first use in this function); did you mean 'NFULA_GID'? if (mnl_attr_get_type(attr) == NFULA_CT) { ^~~~~~~~ NFULA_GID ulogd_inppkt_NFLOG.c:346:34: note: each undeclared identifier is reported only once for each function it appears in ulogd_inppkt_NFLOG.c: In function 'start': ulogd_inppkt_NFLOG.c:669:12: error: 'NFULNL_CFG_F_CONNTRACK' undeclared (first use in this function); did you mean 'NFULNL_CFG_F_SEQ'? flags |= NFULNL_CFG_F_CONNTRACK; ^~~~~~~~~~~~~~~~~~~~~~ NFULNL_CFG_F_SEQ Bump the pkg-config version accordingly. Fixes: f6a615587a10 ("NFLOG: attach struct nf_conntrack") Fixes: e513a04cd925 ("NFLOG: add NFULNL_CFG_F_CONNTRACK flag") Signed-off-by: Jeremy Sowden <jeremy@azazel.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: use `AS_IF` consistently in configure.acJeremy Sowden2021-11-161-79/+37
| | | | | | | | | | | | | configure.ac contains a mix of `AS_IF` and `if` conditionals. Prefer the portable M4sh `AS_IF` macro. In some cases, where there are both `AS_IF` and `if` conditionals evaluating the same predicates, the latter are merged into the former. Replace three instance of `test -n "$var"` with the usual, more portable, autoconf idiom: `test "x$var" != "x"`. Signed-off-by: Jeremy Sowden <jeremy@azazel.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: quote autoconf macro argumentsJeremy Sowden2021-11-151-32/+60
| | | | | | | | | | Arguments are supposed to be quoted in square brackets. Fix several that weren't. Sort and reformat the `AC_OUTPUT_FILES` argument list while we're at it. Signed-off-by: Jeremy Sowden <jeremy@azazel.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: remove commented-out codeJeremy Sowden2021-11-151-12/+0
| | | | | | | | There are a couple of blocks of macros in configure.ac which were commented out in 2006. Remove them. Signed-off-by: Jeremy Sowden <jeremy@azazel.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: update obsolete autoconf macrosJeremy Sowden2021-11-151-4/+2
| | | | | | | | | | | | | `AC_CONFIG_HEADER` has been superseded by `AC_CONFIG_HEADERS`. `AC_PROG_LIBTOOL` has been superseded by `LT_INIT`. `AC_DISABLE_STATIC` can be replaced by an argument to `LT_INIT`. `AC_HEADER_STDC` is obsolete. Signed-off-by: Jeremy Sowden <jeremy@azazel.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: add Make_global.am for common flagsJeremy Sowden2021-11-151-3/+0
| | | | | | | | | | Move `${regular_CFLAGS}` from configure.ac to Make_global.am, renaming it to `AM_CFLAGS`. Add `AM_CPPFGLAGS` to include `$(top_srcdir)/include`. Include the new file in the Makefiles that require it. Signed-off-by: Jeremy Sowden <jeremy@azazel.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: move CPP `-D` flag.Jeremy Sowden2021-11-151-1/+1
| | | | | | | | | The `ULOGD2_LIBDIR` macro is only used in one place, so move the flag defining it out of the common `regular_CFLAGS` variable to the `AM_CPPFLAGS` variable in the Makefile where it is needed. Signed-off-by: Jeremy Sowden <jeremy@azazel.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: remove empty filter sub-directoryJeremy Sowden2021-11-151-1/+1
| | | | | | | The only file in filter/packet2flow is an empty Makefile.am. Remove it. Signed-off-by: Jeremy Sowden <jeremy@azazel.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: remove unused Makefile fragmentJeremy Sowden2021-11-151-1/+1
| | | | | | | | | | Rules.make.in contains a number of variables defined by configure. It is left-over from the pre-Automake build-system, in which it used to fill a similar role to Make_global.am. It is no longer used anywhere. Remove it. Signed-off-by: Jeremy Sowden <jeremy@azazel.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* IPFIX: Add IPFIX output pluginAnder Juaristi2019-04-301-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch adds an IPFIX output plugin to ulogd2. It generates NetFlow/IPFIX traces and sends them to a remote server (collector) via TCP or UDP. Based on original work by Holger Eitzenberger <holger@eitzenberger.org>. How to test this ---------------- I am currently testing this with the NFCT input and Wireshark. Place the following in ulogd.conf: # this will print all flows on screen loglevel=1 # load NFCT and IPFIX plugins plugin="/lib/ulogd/ulogd_inpflow_NFCT.so" plugin="/lib/ulogd/ulogd_output_IPFIX.so" stack=ct1:NFCT,ipfix1:IPFIX [ct1] netlink_socket_buffer_size=217088 netlink_socket_buffer_maxsize=1085440 accept_proto_filter=tcp,sctp [ipfix1] oid=1 host="127.0.0.1" #port=4739 #send_template="once" I am currently testing it by launching a plain NetCat listener on port 4739 (the default for IPFIX) and then running Wireshark and see that it dissects the IPFIX/NetFlow traffic correctly (obviously this relies on the Wireshark NetFlow dissector being correct). First: nc -vvvv -l 127.0.0.1 4739 Then: sudo ulogd -vc ulogd.conf Signed-off-by: Ander Juaristi <a@juaristi.eus> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* Set release number to 2.0.7.Arturo Borrero Gonzalez2018-04-271-1/+1
| | | | Signed-off-by: Arturo Borrero Gonzalez <arturo@netfilter.org>
* ulogd: load all plugins by defaultArturo Borrero Gonzalez2018-01-081-3/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | This new configuration behaviour option eases a bit the configuration of ulogd2 by allowing to load all plugins in one go, without having to know their full path. Choosing concrete plugins and using full path for them is great for some environmnets, but I don't think it's a common case. The common case is to load all plugins, even ignoring where do they live in the filesystem. Even worse, the full path may be architecture-dependant, which makes copying the ulogd.conf file between machines unnecesarily complex. To experiment this new behaviour, don't put any 'plugin=' directive in the config file. Plugins will be loaded from a default directory, choosen at build/configure time (--with-ulogd2libdir). If no specified, this is something like '/usr/local/lib/ulogd/'. This new configuration option doesn't implement any special logic. We simply open the dir and try to load all files ending with '.so'. The log message level for plugins loading is increased so users can see by default which plugins are loaded. Signed-off-by: Arturo Borrero Gonzalez <arturo@netfilter.org> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* Set release number to 2.0.6.Eric Leblond2017-05-161-1/+1
|
* ulogd: add automake optionEric Leblond2017-03-211-1/+1
| | | | | | This option will be needed for future version of automake. Signed-off-by: Eric Leblond <eric@regit.org>
* configure.ac: Add --without-{mysql,pgsql}Harald Welte2015-05-031-2/+9
| | | | | In some cases you may not want to build a certain output plugin, even if the headers/libraries actually exist on the build host.
* Add missing enableval to configureulogd-2.0.5Eric Leblond2015-04-241-3/+14
| | | | Without that --disable-FEATURE is not working correctly.
* Add flag to disable ULOG input pluginEric Leblond2015-04-241-0/+8
| | | | | ULOG target is removed from kernel so we can prepare the removal of the plugin for ulogd. For now, we just add a configure flag.
* Set release number to 2.0.5.Eric Leblond2015-04-031-1/+1
|
* include: keep a copy of linux/netfilter_ipv4/ipt_ULOG.hPablo Neira Ayuso2014-11-141-1/+1
| | | | | | | | | | This fixes compilation if you use a Linux kernel >= 3.17. This problem occurs since ULOG was removed from mainstream: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7200135bc1e61f1437dc326ae2ef2f310c50b4eb Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=986 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* Set release number to 2.0.4.ulogd-2.0.4Eric Leblond2014-03-071-1/+1
| | | | Signed-off-by: Eric Leblond <eric@regit.org>
* json: introduce new JSON output pluginEric Leblond2014-01-281-0/+12
| | | | | | | | | | | | | | This patch introduces a new JSON output plugin. This patch displays CIM field name instead of ulogd key valu if this CIM field is available. The module does not display binary address but uses the string version of them. So a complete stack is for example: stack=log2:NFLOG,base1:BASE,ifi1:IFINDEX,ip2str1:IP2STR,mac2str1:HWHDR,json1:JSON If boolean_label is set to 1, then the numeric_label put on packet by the input plugin is coding the decision on packet. If 0, then packet has been blocked and if non null it has been accepted.
* ulogd: use AC_SEARCH_LIBS for libpthreadGustavo Zacarias2013-12-111-1/+2
| | | | | | | | | Some uClibc-based toolchains lack threading support, so use AC_SEARCH_LIB instead of AC_CHECK_LIB to check for libpthread availability and link conditionally if found since it's only used for the database backends. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
* Set release number to 2.0.3.ulogd-2.0.3Eric Leblond2013-11-191-1/+1
| | | | Signed-off-by: Eric Leblond <eric@regit.org>
* Exec libmnl config check only if nfacct is enabledVictor Julien2013-05-211-1/+1
| | | | | | In case nfacct is not enabled in ulogd2, libmnl is not used. So it shouldn't be a hard global dependency, but instead only a dependency in case nfacct is enabled.
* db: add ring buffer for DB queryEric Leblond2013-05-211-0/+2
| | | | | | | | | | | This patch adds an optional ring buffer option which modify the way database queries are made. The main thread is only handling kernel message reading and query formatting. The SQL request is made in a separate dedicated thread. The idea is to try to avoid buffer overrun by minimizing the time requested to treat kernel message. Doing synchronous SQL request, as it was made before was causing a delay which could cause some messages to be lost in case of burst from kernel side.
* Fix automagic support of dbi, pcap and sqlite3Ilya Tumaykin2013-04-201-10/+20
| | | | | | | | | | | | | | | | | | ulogd has automagic deps for several output plugins right now, namely dbi, pcap and sqlite3. These plugins are built if the appropriate libs are present on user's system. While this situation is fine with binary distros it is not OK on source-based ones such as Gentoo. The problem arises when such a program links against libs without user's request and libs are later removed from system which leaves program in a broken state. This patch is modifying configure.ac which we apply in our package and which fixes mentioned issue. It adds 3 new configure options: -- without-{dbi,pcap.sqlite}. I would like to emphasize that this patch doesn't change default behaviour of configure script at all, so all other distros won't suffer. We simply add options to explicitly disable any attempts to try and detect libs for automagic deps, which is enough to avoid unnecessary linkage.
* Prepare release number to 2.0.2ulogd-2.0.2Eric Leblond2013-02-251-1/+1
| | | | | Update release number and delete Changes file because we can use git changelog fot that.
* build: resolve automake-1.12 warningsJan Engelhardt2012-11-271-0/+1
| | | | | | | | | /usr/share/automake-1.12/am/ltlibrary.am: warning: 'ulogd_output_SQLITE3.la': linking libtool libraries using a non-POSIX archiver requires 'AM_PROG_AR' in 'configure.ac' (one for each .la) Signed-off-by: Jan Engelhardt <jengelh@inai.de>
* configure: display info about build pluginsEric Leblond2012-11-041-2/+40
| | | | | This patch modifies configure to display the list of plugins that will be built.
* configure: add flag to disable NFLOG buildEric Leblond2012-11-041-1/+7
|
* configure: add flag to disable NFCT buildEric Leblond2012-11-041-1/+7
|
* configure: add flag to disable NFACCT buildEric Leblond2012-11-041-1/+7
| | | | | | It is now possible to pass the --disable-nfacct flag to disable compilation of NFACCT input plugin. Doing this the build of ulogd is possible on system where nfacct is not available.
* autoconf/ulogd: fix broken libpcap AM_CONDITIONALGustavo Zacarias2012-10-101-1/+1
| | | | | | | | The AM_CONDITIONAL lacks the opening bracket, hence it always evaluates as true, even if there's no libpcap found thus causing build breakage. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* bump version to 2.0.1ulogd-2.0.1Pablo Neira Ayuso2012-10-081-4/+4
| | | | | | | And update library dependency. Push users to upgrade to get fixes from library releases. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* output: XML: display time for NFACCTPablo Neira Ayuso2012-06-221-1/+1
| | | | | | <obj><name>test</name><pkts>00000000000000000000</pkts><bytes>00000000000000000000</bytes><hour>17</hour><min>46</min><sec>47</sec><wday>6</wday><day>22</day><month>6</month><year>2012</year></obj> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: require 1.0.0 of all librariesulogd-2.0.0Pablo Neira Ayuso2012-06-171-2/+2
| | | | | | | Bump library version requirement to relatively recent releases of all libraries (ie. 1.0.0 release). Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: bump release version to 2.0.0Pablo Neira Ayuso2012-06-171-1/+1
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* pcap: resolve unreliable detectionJan Engelhardt2012-06-051-4/+3
| | | | | | | | | | | | pcap is not found reliably by either --with-pcap=%_prefix or --with-pcap-lib=%_libdir --with-pcap-inc=%_includedir. If you have any special paths, just use ./configure CPPFLAGS="-I/my/pcap" LDFLAGS="-L/my/pcap" (And -lpcap is already known so no need to specify that.) Signed-off-by: Jan Engelhardt <jengelh@inai.de>
* input: add nfacct pluginPablo Neira Ayuso2012-02-221-0/+4
| | | | | | This patch adds the nfacct plugin. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>