blob: 0a6b1e3a27a34d48e45fea65e8793c91e070b688 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
|
# Example configuration for ulogd
# $Id: ulogd.conf.in,v 1.1 2003/04/27 07:47:26 laforge Exp $
#
######################################################################
# GLOBAL OPTIONS
######################################################################
# netlink multicast group (the same as the iptables --ulog-nlgroup param)
nlgroup 1
# logfile for status messages
logfile /var/log/ulogd.log
# loglevel: debug(1), info(3), notice(5), error(7) or fatal(8)
loglevel 5
# socket receive buffer size (should be at least the size of the
# in-kernel buffer (ipt_ULOG.o 'nlbufsiz' parameter)
rmem 131071
# libipulog/ulogd receive buffer size, should be > rmem
bufsize 150000
######################################################################
# PLUGIN OPTIONS
######################################################################
# We have to configure and load all the plugins we want to use
# general rules:
# 1. specify the options FIRST, then load the plugin
# 2. interpreter plugins have to precede output plugins
#
# ulogd_BASE.so - interpreter plugin for basic IPv4 header fields
# you will always need this
plugin @libdir@/ulogd_BASE.so
#
# ulogd_LOGEMU.so - simple syslog emulation target
#
# where to write to
syslogfile /var/log/ulogd.syslogemu
# do we want to fflush() the file after each write?
syslogsync 1
# load the plugin
plugin @libdir@/ulogd_LOGEMU.so
#
# ulogd_OPRINT.so: file for packet dumping
#
# where to write the log
dumpfile /var/log/ulogd.pktlog
# load the plugin (remove the '#'if you want to enable it
#plugin @libdir@/ulogd_OPRINT.so
#
# ulogd_MYSQL.so: optional logging into a MySQL database
#
# database information
mysqltable ulog
mysqlpass changeme
mysqluser laforge
mysqldb ulogd
mysqlhost localhost
# load the plugin (remove the '#' if you want to enable it)
#plugin @libdir@/ulogd_MYSQL.so
#
# ulogd_PGSQL.so: optional logging into a PostgreSQL database
#
# database information
pgsqltable ulog
pgsqlpass
pgsqluser postgres
pgsqldb ulogd
pgsqlhost localhost
#load the plugin (remove the '#' if you want to enable it)
#plugin @libdir@/ulogd_PGSQL.so
pcapfile /var/log/ulogd.pcap
pcapsync 1
#plugin @libdir@/ulogd_PCAP.so
|
