From a71e351b255874e2054020a99caacbb8accd3430 Mon Sep 17 00:00:00 2001 From: "/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org" Date: Sun, 10 Feb 2008 02:08:42 +0000 Subject: Eric Leblond : Document the difference between IPv4 and IPv6 logging. --- ulogd.conf.in | 17 +++++++++++++---- 1 file changed, 13 insertions(+), 4 deletions(-) diff --git a/ulogd.conf.in b/ulogd.conf.in index 3fc3a41..6d76909 100644 --- a/ulogd.conf.in +++ b/ulogd.conf.in @@ -43,9 +43,12 @@ plugin="@libdir@/ulogd/ulogd_output_LOGEMU.so" plugin="@libdir@/ulogd/ulogd_output_OPRINT.so" plugin="@libdir@/ulogd/ulogd_raw2packet_BASE.so" -# this is a stack for packet-based logging via LOGEMU +# this is a stack for IPv4 packet-based logging via LOGEMU #stack=log1:NFLOG,base1:BASE,ifi1:IFINDEX,ip2str1:IP2STR,print1:PRINTPKT,emu1:LOGEMU +# this is a stack for IPv6 packet-based logging via LOGEMU +#stack=log2:NFLOG,base1:BASE,ifi1:IFINDEX,ip2str1:IP2STR,print1:PRINTPKT,emu1:LOGEMU + # this is a stack for ULOG packet-based logging via LOGEMU #stack=ulog1:ULOG,base1:BASE,ip2str1:IP2STR,print1:PRINTPKT,emu1:LOGEMU @@ -55,21 +58,27 @@ plugin="@libdir@/ulogd/ulogd_raw2packet_BASE.so" # this is a stack for flow-based logging via OPRINT #stack=ct1:NFCT,op1:OPRINT -# this is a stack for NFLOG packet logging to MySQL +# this is a stack for logging packet to MySQL #stack=log1:NFLOG,base1:BASE,ifi1:IFINDEX,ip2bin1:IP2BIN,mysql1:MYSQL -# this is a stack for NFLOG packet logging to PGsql -#stack=log1:NFLOG,base1:BASE,ifi1:IFINDEX,ip2str1:IP2STR,pgsql1:PGSQL +# this is a stack for logging IPv6 packet to PGsql after a collect via NFLOG +#stack=log2:NFLOG,base1:BASE,ifi1:IFINDEX,ip2str1:IP2STR,pgsql1:PGSQL # this is a stack for flow-based logging to MySQL #stack=ct1:NFCT,ip2bin1:IP2BIN,mysql2:MYSQL [ct1] +# IPv4 logging through NFLOG [log1] # netlink multicast group (the same as the iptables --nflog-group param) group=0 +# IPv6 logging through NFLOG +[log1] +group=1 # Group has to be different from the one use in log1 +addressfamily=10 # 10 is value of AF_INET6 + [ulog1] # netlink multicast group (the same as the iptables --ulog-nlgroup param) nlgroup=1 -- cgit v1.2.3