All of lore.kernel.org
 help / color / mirror / Atom feed
From: Eric Leblond <eric@inl.fr>
To: netfilter-devel@vger.kernel.org
Subject: [ULOGD PATCH 0/14] Misc improvements and bugfixes
Date: Sun, 23 Mar 2008 17:25:08 +0100	[thread overview]
Message-ID: <1206289522679-git-send-email-eric@inl.fr> (raw)

Hello,

This patchset contains some code cleaning and two structural changes.

The first four patches are code cleaning:
 * Fix SQL reconnection algorithm.
 * Suppress ip_as_string configuration variable.
 * Fix type of raw.mac_len key in NFLOG.
 * Fix type of raw.mac_len key in ULOG.

The next set is more interesting as it introduces handling of MAC address
via a dedicated module named MAC2STR. Source hardware address is now stored
in a dedicated table of the MySQL and pgSQL databases.

Patches which implement this modification are:
 * New MAC2STR plugin for hwmac address conversion.
 * MAC address handling in MySQL output plugin.
 * MAC address handling in PgSQL output plugin.

The next set of patches try to solve a classical netfilter logging problem. As
logging is not a verdict, it is not possible to know in userspace if a packet
has been accepted or dropped. A frequent workaround is to use the prefix of the
ULOG or NFLOG target to indicate the decision taken on the packet.

The idea behind this patchset is to dedicate a group (and a plugin instance in
ulogd2) to accepted packets and an other instance to dropped packets. To 
differentiate the instances a new option, state, has been added to NFLOG and
ULOG plugins. Default value of the option is 0 which is NF_DROP value.

The value of the option is sent to the output module as "raw.state" key. This
value is stored in a dedicated table of the PgSQL and MySQL output modules.

This modification is implemented in the following patches:
 * Add state option to NFLOG input plugin.
 * Add state support to MySQL schema.
 * Add state option to ULOG input plugin.
 * Add state support to PGSQL output module.

The remaining patches are :
 * Add hook output to ULOG input module.
 * Update default configuration to fit last changes.
 * Fix computation of length of mac address.

Patchset statistics :
 doc/mysql-ulogd2.sql              |   78 +++++++++++++++-----------
 doc/pgsql-ulogd2.sql              |   59 +++++++++++++++++---
 filter/Makefile.am                |    6 ++-
 filter/ulogd_filter_MAC2STR.c     |  111 +++++++++++++++++++++++++++++++++++++
 include/ulogd/db.h                |   13 ++---
 input/packet/ulogd_inppkt_NFLOG.c |   26 +++++++-
 input/packet/ulogd_inppkt_ULOG.c  |   33 ++++++++++-
 ulogd.conf.in                     |   10 +++-
 util/db.c                         |   20 ++----
 util/printpkt.c                   |    2 +-
 10 files changed, 286 insertions(+), 72 deletions(-)

BR,
--
Eric Leblond
INL: http://www.inl.fr/
NuFW: http://www.nufw.org/

             reply	other threads:[~2008-03-23 16:25 UTC|newest]

Thread overview: 49+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2008-03-23 16:25 Eric Leblond [this message]
2008-03-23 16:25 ` [ULOGD PATCH 01/14] Fix SQL reconnection algorithm Eric Leblond
2008-04-05 13:55   ` Pablo Neira Ayuso
2008-03-23 16:25 ` [ULOGD PATCH 02/14] Suppress ip_as_string configuration variable Eric Leblond
2008-04-05 15:05   ` Pablo Neira Ayuso
2008-04-05 19:00     ` Eric Leblond
2008-04-07 23:50       ` Pablo Neira Ayuso
2008-03-23 16:25 ` [ULOGD PATCH 03/14] Fix type of raw.mac_len key in NFLOG Eric Leblond
2008-04-05 14:30   ` Pablo Neira Ayuso
2008-03-23 16:25 ` [ULOGD PATCH 04/14] Fix type of raw.mac_len key in ULOG Eric Leblond
2008-04-05 14:33   ` Pablo Neira Ayuso
2008-03-23 16:25 ` [ULOGD PATCH 05/14] New MAC2STR plugin for hwmac address conversion Eric Leblond
2008-04-05 14:35   ` Pablo Neira Ayuso
2008-03-23 16:25 ` [ULOGD PATCH 06/14] MAC address handling in MySQL output plugin Eric Leblond
2008-04-05 14:51   ` Pablo Neira Ayuso
2008-04-05 19:03     ` Eric Leblond
2008-04-07 23:52       ` Pablo Neira Ayuso
2008-03-23 16:25 ` [ULOGD PATCH 07/14] MAC address handling in PgSQL " Eric Leblond
2008-04-05 14:52   ` Pablo Neira Ayuso
2008-03-23 16:25 ` [ULOGD PATCH 08/14] Add state option to NFLOG input plugin Eric Leblond
2008-04-05 15:10   ` Pablo Neira Ayuso
2008-04-05 19:15     ` Eric Leblond
2008-04-07 23:56       ` Pablo Neira Ayuso
2008-04-10  4:56         ` Eric Leblond
2008-04-13  7:03           ` Eric Leblond
2008-04-16 11:39             ` Pablo Neira Ayuso
2008-04-16 13:22               ` [ULOGD PATCH 0/7] Resend, add label to SQL logging Eric Leblond
2008-04-16 13:22               ` [ULOGD PATCH 1/7] Add label option to NFLOG input plugin Eric Leblond
2008-04-27  7:27                 ` Pablo Neira Ayuso
2008-04-27  8:44                   ` Eric Leblond
2008-04-28 13:44                     ` Pablo Neira Ayuso
2008-04-28 13:53                       ` [ULOGD PATCH 0/3] Resend: rename label to numeric_label Eric Leblond
2008-04-28 13:53                         ` [PATCH 1/3] Add numeric_label option to ULOG input plugin Eric Leblond
2008-04-28 13:53                           ` [PATCH 2/3] Add numeric_label option to NFLOG " Eric Leblond
2008-04-28 13:53                             ` [PATCH 3/3] Update default configuration to fit last changes Eric Leblond
2008-04-29 14:26                         ` [ULOGD PATCH 0/3] Resend: rename label to numeric_label Pablo Neira Ayuso
2008-04-16 13:22               ` [ULOGD PATCH 2/7] Add label support to MySQL schema Eric Leblond
2008-04-16 13:22               ` [ULOGD PATCH 3/7] Add label option to ULOG input plugin Eric Leblond
2008-04-16 13:22               ` [ULOGD PATCH 4/7] Add hook output to ULOG input module Eric Leblond
2008-04-16 13:22               ` [ULOGD PATCH 5/7] Add label support to PGSQL output module Eric Leblond
2008-04-16 13:22               ` [ULOGD PATCH 6/7] Update default configuration to fit last changes Eric Leblond
2008-04-16 13:22               ` [ULOGD PATCH 7/7] Convert SQL procedure to function in MySQL plugins Eric Leblond
2008-03-23 16:25 ` [ULOGD PATCH 09/14] Add state support to MySQL schema Eric Leblond
2008-03-23 16:25 ` [ULOGD PATCH 10/14] Add state option to ULOG input plugin Eric Leblond
2008-03-23 16:25 ` [ULOGD PATCH 11/14] Add hook output to ULOG input module Eric Leblond
2008-03-23 16:25 ` [ULOGD PATCH 12/14] Add state support to PGSQL output module Eric Leblond
2008-03-23 16:25 ` [ULOGD PATCH 13/14] Update default configuration to fit last changes Eric Leblond
2008-03-23 16:25 ` [ULOGD PATCH 14/14] Fix computation of length of mac address Eric Leblond
2008-04-05 14:56   ` Pablo Neira Ayuso

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1206289522679-git-send-email-eric@inl.fr \
    --to=eric@inl.fr \
    --cc=netfilter-devel@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.