summaryrefslogtreecommitdiffstats
path: root/input
Commit message (Collapse)AuthorAgeFilesLines
...
* [ULOGD PATCH, RFC] Modify NFLOG to be able to use it with older libnetfilter_log/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2008-04-221-1/+2
| | | | | | | | NFLOG has been modified to support GID display. There is a problem as this feature is only available in latest subversion of libnetfilter_log. This patch made this feature optional: * It detects if system support the nflog_get_gid() function * Compilation of nflog_get_gid() related code is conditional
* Fix missing chunk for GID logging/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2008-04-211-1/+5
|
* Print GID/MARK in printpkt.c/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2008-04-211-1/+6
|
* This patch is a port to the new libnetfilter_conntrack API of the NFCT/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-04-051-64/+82
| | | | | | | plugin. To be able to send IP addresses to the IP2STR and IP2BIN module oob.family and oob.protocol keys have been added. Signed-off-by: Eric Leblond <eric@inl.fr>
* Type of the raw.mac_len key was set to string but this is an unsigned/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-04-051-1/+1
| | | | | | interger. This patch fix this in the ULOG module. Signed-off-by: Eric Leblond <eric@inl.fr>
* Type of the raw.mac_len key was set to string but this is an unsigned/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-04-051-1/+1
| | | | | | interger. This patch fix this in the NFLOG module. Signed-off-by: Eric Leblond <eric@inl.fr>
* This patch contains two linked modifications in NFCT input plugin:/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-03-261-18/+37
| | | | | | | | | - event mask is now configurable though the event_mask configuration variable - event type is now stored in the ct.event output key. This can be used to display the information or to use it to implement some tracking algorithm in userspace. Signed-off-by: Eric Leblond <eric@inl.fr>
* This patch adds support for duplication of the message to be/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-03-251-0/+10
| | | | | | able to use multiple time the same instance of NFCT. Signed-off-by: Eric Leblond <eric@inl.fr>
* A specific instance of NFLOG can now be use in multiple stacks. This is done/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-03-251-0/+6
| | | | | | by duplicating the interpretation of the message. Signed-off-by: Eric Leblond <eric@inl.fr>
* An instance of NFLOG can now be use in multiple stacks. This is done/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-03-251-1/+10
| | | | | | by duplicating the interpretation of the message. Signed-off-by: Eric Leblond <eric@inl.fr>
* Minor indentation fix in ulogd_inppkt_NFLOG.c./C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-03-251-1/+1
| | | | Signed-off-by: Eric Leblond <eric@inl.fr>
* - implement a synchronous timer framework/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-02-191-14/+12
| | | | - fix crash when enabling pollinterval clause in flow-based accounting
* Sends one message for each connection event instead of two/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-02-191-68/+168
| | | | Signed-off-by: Eric Leblond <eric@inl.fr>
* revert r7348/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-02-102-0/+24
|
* From: Eric Leblond <eric@inl.fr>/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-02-091-0/+14
| | | | Add support for UID dumping to NFLOG input plugin.
* From: Eric Leblond <eric@inl.fr>/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-02-091-2/+2
| | | | The treatment of the return of some functions from libnetfilter_log API was wrong and this was preventing some fields to be propagated through the stack.
* From: Eric Leblond <eric@inl.fr>:/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-02-092-24/+0
| | | | | | | | | | | | When using NFLOG or ULOG, obb.family (protocol IPv4 or IPv6) has to be setup manually in ulogd.conf configuration file. This is used by the BASE filter to properly parse the packet. This patch suppress oob.family as output keys of NFLOG and ULOG and let the BASE filter determine the family of the packet by itself (by parsing the raw header). A good side effect is to be able to log in IPv6 and IPv4 in the same group. Before that, two loggers have to be setup separatly.
* From: Eric leblond <eric@inl.fr>/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-02-031-0/+1
| | | | OOB_FAMILY output was not set by NFLOG because the key was not set as valid.
* Ulogd2: fix some indenting/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2008-01-121-19/+19
| | | | | | | The following patch fixes some indenting and typo in various ulogd2 files. Eric Leblond <eric@inl.fr>
* [PATCH 4/5] Workaround of recvfrom() EAGAIN bug/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2008-01-121-0/+2
| | | | | | | | | | | | | | | | | | | | This is a workaround which prevents ulogd from logging each time when recvfrom() returns error because of EAGAIN. Since the netlink socket is now O_NONBLOCK, we probably run into the following bug: http://bugzilla.kernel.org/show_bug.cgi?id=5498 which causes recvfrom() get an error when select() had a good return, whenever select() receives a packet with a bad checksum. ipulog_read() always has this problem once after every successful ipulog_read(). Signed-off-by: Peter Warasin <peter@endian.com> [Note: this is not a workaround but correct handling of EAGAIN on a non-blocking socket. -Patrick]
* [PATCH 3/5] Logs also ipulog_strerror() and strerror() within ULOG plugin/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2008-01-121-2/+5
| | | | | | | | This patch logs also the string representations ipulog:_strerror() and strerror() when an error occurred during receivement of packets within the ULOG plugin Signed-off-by: Peter Warasin <peter@endian.com>
* [PATCH 2/5] Dont ntohs() mac_len of ULOG, since it is not in network byte order/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2008-01-121-1/+1
| | | | | | | Stores mac_len correctly, since within ULOG structire it is not stored in network byte order. Signed-off-by: Peter Warasin <peter@endian.com>
* [PATCH]: ulogd2: fix ULOG input plugin/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2008-01-041-38/+70
| | | | | | | The ULOG input plugin of ulogd2 was not working. This patch fixes this and cleans the code via introduction of an enum. Eric Leblond <eric@inl.fr>
* [PATCH]: Ulogd2: code cleaning/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2008-01-041-32/+50
| | | | | | | | | | | | | | | | | This patch adds an enum to get rid of access to array via numerical index in NFLOG input plugin. This replaces code like: ret[0].flags |= ULOGD_RETF_VALID; ret[11].u.value.ui16 = ntohs(hw->hw_addrlen); with: ret[NFLOG_KEY_RAW_MAC].flags |= ULOGD_RETF_VALID; ret[NFLOG_KEY_RAW_MAC_LEN].u.value.ui16 = ntohs(hw->hw_addrlen); which is more readable. Eric Leblond <eric@inl.fr>
* Add IPv6 support, fix a few incorrect key assignments and make sure this doesn't/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org2007-03-061-7/+19
| | | | | repeat by using symbolic names to make sure the assignment matches the array index.
* [PATCH]: fix a trivial typo in ULOG plugin code (Eric Leblond)/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org2006-10-111-1/+1
|
* [PATCH]: fix crash in ULOG input plugin due to a free on invalid value (Eric ↵/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org2006-10-111-2/+2
| | | | Leblond)
* [PATCH]: synchronize ULOG input plugin with current ulogd2 API (Eric Leblond)/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org2006-10-111-0/+1
|
* Add a printflow plugin is similar to the PRINTPKT plugin, but for flows. It's/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2006-05-231-0/+8
| | | | output is compatible with the SYSLOG and LOGEMU plugins. (Philip Craig)
* use correct libipulog.la libtool name (Philip Craig)/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2006-05-231-1/+1
|
* fix number of config entries in inppkt_ULOG plugin (Philip Craig)/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2006-05-231-1/+1
|
* - add IPFIX netfilter vendor specific fields for seq global/local/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2006-01-261-0/+8
| | | | - use real value for netfilter ipfix vendor id
* add support for new 'seq_local' and 'seq_global' arguments/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2006-01-261-2/+48
|
* fix some hahstable related bugs:/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2006-01-261-8/+12
| | | | | | | 1) correctly name flow.end.usec 2) initialize 'idle' list_head 3) don't allocate hash table in case hash_use=0 4) fix invalid pointer arithmetic
* fix output key initialization (Christian Hentschel)/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2006-01-131-1/+1
|
* fix compiler warning (void/char) (Christian Hentschel)/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2006-01-121-1/+1
|
* introduce NFCT input plugin hash table for start/end timestamps. Based on an/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2006-01-121-16/+294
| | | | | | | | | | | | | | | | | | | | original patch by Christian Hentschel, amended like: 1) the hash table has to be per-instance, since [at least in the future] we can have nfnetlink messages routed from other machines over the network, thus every NFCT instance has to have it's own hash table. 2) Whether or not to use a preallocated table is now a configuration value, as is the number of buckets and max_entries 3) configure_nfct was not used in the struct ulogd_plugin.configure 4) don't put the hashtable buckets in BSS, but rather allocate them dynamically 5) allocate all ct_timestamps (in the preallocated case) at once, rather than malloc()ing each on its own. 6) use official IPFIX fields for flow start and flow end instead of private numbers 7) use llist instead of list (linuxlist.h adds an additional 'l') 8) add lots of TODO items 9) add IPFIX_NF_conntrack_id to header file
* - Cosmetic changes (tab indent struct initializers)/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2006-01-121-18/+18
| | | | - Rename "tcp.[sd]port" into "l4.[sd]port" (Christian Hentschel)
* add support for get-counter-and-zero polling/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2006-01-071-2/+64
|
* we don't need RETF_FREE for stuf that isn't dynamically allocated/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2005-12-141-2/+2
|
* more verbose error reporting/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2005-12-081-5/+18
|
* fixes/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2005-11-293-3/+3
|
* make 'num_keys' an attribute of pluginstance instead of pluginlaforge2005-11-203-8/+9
|
* introduce version field for plugins, refuse loading plugins with different ↵laforge2005-11-053-0/+3
| | | | version
* finish port of ULOG input pluginlaforge2005-11-052-39/+39
|
* - fix endianness of ip address / port numberslaforge2005-11-051-5/+6
| | | | - fix segfault due to missing priv_size
* we only need to link against libnetfilter_loglaforge2005-11-051-1/+1
|
* - add IPFIX field id's laforge2005-11-051-41/+60
| | | | - add some more output keys
* use accessor functions as available by latest libnetfilter_loglaforge2005-11-051-49/+49
|
* add some more ipfix related information to NFCTlaforge2005-11-041-10/+45
|