summaryrefslogtreecommitdiffstats
path: root/doc
Commit message (Collapse)AuthorAgeFilesLines
* harmonize log file defaults with ulogd.confKaarle Ritvanen2017-05-161-2/+2
| | | | Signed-off-by: Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>
* sqlite3: Remove unused "buffer" option.Alex Xu2016-01-191-2/+0
| | | | | | | This option was left behind when the code was rewritten and is no longer functional or useful. Remove it entirely. Signed-off-by: Alex Xu (Hello71) <alex_y_xu@yahoo.ca>
* Get rid of SVN tag in comment.Eric Leblond2013-01-181-2/+0
| | | | This patch also update some copyright and licence declaration.
* Add additional ip6 header fields to database scriptsBob Hockney2012-12-194-28/+105
| | | | | Rename internal keyname ip6.payload_len to remove "_" to facilitate this.
* pgsql schema: fix timestamp default valueEric Leblond2012-08-031-1/+1
| | | | | | | | | Set timestamp default value to now() not now which is the time at table creation. Reported-by: Mr Dash Four <mr.dash.four@googlemail.com> Signed-off-by: Eric Leblond <eric@regit.org> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* pgsql schema: add nfacct tableEric Leblond2012-08-031-0/+22
| | | | | | | | This patch adds a nfacct table to the postgresql schema. It enables the storage of all counters at each poll. Signed-off-by: Eric Leblond <eric@regit.org> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* doc: add documentation for SIGUSR2Björn Lässig2012-06-091-0/+3
| | | | | | | | | Signal SIGUSR2 makes plugin ulogd_inpflow_NFCT to * dump conntrack table * flush counters Signed-off-by: Björn Lässig <laessig@bitformer.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* A simple filter plugin called IP2HBIN addedJozsef Kadlecsik2012-01-161-0/+4
| | | | | | | | The plugin converts the IPv4 addresses to host order for databases like MySQL. The expected name of the table fields are ip.hsaddr, ip.hdaddr, etc. Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
* Support stored mysql procedures besides stored functionsJozsef Kadlecsik2012-01-161-0/+4
| | | | | | | | | | | MySQL stored procedures must be invoked by the "CALL" SQL command and not by "SELECT". Add the convention that if the procedure name starts with "CALL", then the issued SQL command is "CALL procedurename(args)". The stored procedure support in MySQL automatically brings transaction support too. Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
* sqlite3: remove automatic creation of table `daily'Pablo Neira Ayuso2011-02-252-8/+10
| | | | | | | | | | | | | | | | | | | This patch removes the creation of the `daily' table. Now, we assume that the table that we use are created before launching ulogd2. This code is broken because you have to specify in the configuration file that the table used is `daily', otherwise this `daily' table is created and dropped during the daemon starting, but not used. Moreover, the code explicit shows a message that it says: /* FIXME make this configurable */ So, I think that this patch is the way to go :-). This patch also documents the table creation in ulogd.sgml Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* sqlite3: add configuration examples and new tables layoutPablo Neira Ayuso2011-02-252-21/+35
| | | | | | | | | | This patch adds two configuration examples for sqlite3 to log flows and packets. We use two tables, one for packet logging information, and another for flow-based information. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* Mysql schema: fix procedure declarationEric Leblond2010-09-221-2/+2
| | | | | | It seems that some version of MySQL were more delicate about comment in procedure. THis patch fixes a problem with a procedure comment and fix the inner code which was not using the correct variable.
* Mysql schema: fix delimiterEric Leblond2010-09-221-15/+25
| | | | | | | The use of delimiter was not correct in the MySQL schema. This patch fixes this issue my correctly switching from ";" to "$$" when needed. Based on a patch by Bruno Friedmann <bruno@ioda-net.ch>
* Fix wrong definition of views in flat DB schemaPierre Chifflier2009-09-172-12/+12
| | | | | | Create views using the ip_protocol field (and not the oob_family). Signed-off-by: Pierre Chifflier <chifflier@inl.fr>
* Documentation: information about procedure variable.Eric Leblond2009-04-181-1/+9
| | | | | This patch documents the "procedure" option in the database plugin configurations.
* pgsql: fix type of mac_protocol and oob_protocol.Eric Leblond2009-02-082-2/+2
| | | | | The oob_protocol does not fit into a smallint (IPv6 case for example). This patch switches the length of the related field to an integer.
* Flat SQL schema for MySQLPierre Chifflier2009-01-071-0/+478
| | | | | | | This schema is designed for performance, by putting all fields in a single table. It should be used in combination with plain INSERT. Signed-off-by: Pierre Chifflier <chifflier@inl.fr>
* Flat SQL schema for PostgreSQLPierre Chifflier2009-01-071-0/+406
| | | | | | | This schema is designed for performance, by putting all fields in a single table. It should be used in combination with plain INSERT. Signed-off-by: Pierre Chifflier <chifflier@inl.fr>
* PostgreSQL schema: drop useless constraintsPierre Chifflier2009-01-071-5/+0
| | | | | | | Constraints on TCP/UDP port number validity are useless and only slow down insertions. Signed-off-by: Pierre Chifflier <chifflier@inl.fr>
* Add SCTP support to MySQL and PGSQL output.Eric Leblond2008-12-092-5/+79
| | | | | | | | This patch adds support for SCTP in the MySQL and PGSQL output plugins. It adds a dedicated SCTP table and modifies the insert_packet_full procedure. Signed-off-by: Eric Leblond <eric@inl.fr>
* pgsql: remove useless checkingsPierre Chifflier2008-10-201-6/+0
| | | | | | | This patch removes useless checkings. Signed-off-by: Pierre Chifflier <chifflier@inl.fr> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* doc: update author credits and fix reference to closed MLEric Leblond2008-09-111-5/+1
| | | | | | | | This patch adds Eric Lenblond as documentation author and it removes a reference to the ulogd ML which is closed. Signed-off-by: Eric Leblond <eric@inl.fr> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* doc: update ulogd SGML documentationEric Leblond2008-09-111-41/+181
| | | | | | | | This patch updates the SGML documentation to be in sync with the latest version of the code. Signed-off-by: Eric Leblond <eric@inl.fr> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* distrib: fix distcheck magiculogd-2.0.0beta2Pablo Neira Ayuso2008-08-151-6/+3
| | | | | | This patch fixes the `make distcheck' magic Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* DB: update schemas to integrate the link layer informationEric Leblond2008-07-292-23/+94
| | | | | | | | | | | | This patch adds support for logging the destination mac address and raw header in the SQL databases. In case of an ethernet header, a tuple (mac_saddr,mac_daddr,mac_proto) is logged only once. Signed-off-by: Pierre Chifflier <chifflier@inl.fr> Signed-off-by: Eric Leblond <eric@inl.fr> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* Store MAC in SQL databases only oncePierre Chifflier2008-06-122-32/+53
| | | | | | | | | This patch modifies the SQL schema for MySQL and PostgreSQL to store the mac address only once (instead of duplicating the mac address for each packet). This is done by using a shared reference to the entry containing the tuple (mac_address,mac_protocol). Signed-off-by: Pierre Chifflier <chifflier@inl.fr>
* This patch adds a new function which insert or update connection trackingEric Leblond2008-06-021-0/+61
| | | | entries depending on the event type parameter.
* Sync SQL fields with NFCT keysEric Leblond2008-06-021-14/+14
|
* This patchset adds support for the "numeric_label" option. For instance, it/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-04-292-12/+20
| | | | | | | can be used to determine if the packet has been dropped, rejected or accepted. The meaning of label is completely user-defined. Signed-off-by: Eric Leblond <eric@inl.fr>
* Update PostgreSQL schema to add the insert procedure for conntrack/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-04-271-4/+44
| | | | | | connections. Signed-off-by: Pierre Chifflier <chifflier@inl.fr>
* Introduce function to convert binary data to printable strings./C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-04-271-2/+37
| | | | | | Update view_tcp_quad and view_udp_quad. Signed-off-by: Pierre Chifflier <chifflier@inl.fr>
* Add function INSERT_CT for conntrack/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-04-271-27/+29
|
* fix PGSql types/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-04-121-8/+8
| | | | Signed-off-by: Eric Leblond <eric@inl.fr>
* Fix an inconsistency of field naming among the different tables and/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-04-091-2/+2
| | | | | | | accross the stack NFCT IP2BIN MYSQL.In fact IP2BIN out .bin suffixed fields. Signed-off-by: Eric Leblond <eric@inl.fr>
* This patch adds MAC address handling to the postgresql output plugin./C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-04-051-4/+19
| | | | Signed-off-by: Eric Leblond <eric@inl.fr>
* This patch adds MAC address handling to the postgresql output plugin. This/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-04-051-18/+13
| | | | | | | patch also removes mac_daddr which does not provide any interesting logging information. Signed-off-by: Eric Leblond <eric@inl.fr>
* This patch adds oob.hook to the list of fields export to the databases. This/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-03-252-14/+23
| | | | | | | adds the capability to know where the packet has been logged and will be used to make a link between connection and logged packets. Signed-off-by: Eric Leblond <eric@inl.fr>
* From: Pierre Chifflier <chifflier@inl.fr> and Eric Leblond <eric@inl.fr>/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-02-092-12/+110
| | | | Add Icmpv6 support to SQL schema.
* remove old mysql and pgsql definitions/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-02-034-195/+1
|
* From: Pierre Chifflier <chifflier@inl.fr>/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-02-031-81/+69
| | | | | This patch fixes the type of some fields in the SQL schema to sync with datatype of the corresponding ulogd2 keys.
* From: Eric leblond <eric@inl.fr>/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-02-031-0/+28
| | | | | This patch adds an state extension to SQL schema. This can be used to store the information about the packet being dropped or accepted.
* From: Pierre Chifflier <chifflier@inl.fr>/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-02-031-4/+4
| | | | | SQL standard says a function has to be called with SELECT and not CALL. This patch modify code accordingly.
* From: Eric leblond <eric@inl.fr>/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-02-031-2/+2
| | | | This patch fixes some small typo in MySQL schema.
* From: Pierre Chifflier <chifflier@inl.fr>/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-02-032-75/+170
| | | | This patch adds oob_family to the schema. Thus it is now possible to easily select IPv4 or IPv6 entries in the database. This patch also explicitly selects fields to create view.
* From: Eric leblond <eric@inl.fr>/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-02-031-23/+23
| | | | This patch clarifies code which will be modified in next patch.
* From: Pierre Chifflier <p.chifflier@inl.fr>/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-02-032-87/+213
| | | | Add insert functions for the PostgreSQL version
* From: Eric leblond <eric@inl.fr>/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-02-032-0/+1102
| | | | | | | | | This patch adds new SQL schema for MySQL and PGsql. The goal is to improve the one line per entry format. There is no more a big table with all fields because this sort of storage is causing bad performance (databases don't like to have a lot of NULL fields to store). Main changes are : * Add new schema for MySQL and PGsql * Use call to configurable procedure in SQL OUTPUT modules * Arguments of a procedure are given by the list of fields of a selected table
* fix doc building/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2006-01-082-51/+10
|
* add some bits about signals/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2005-12-081-0/+11
|
* update documentation somewhatlaforge2005-11-051-67/+79
|
generated by cgit v1.2.3 (git 2.25.0) at 2024-11-01 00:33:22 +0000