All of lore.kernel.org
 help / color / mirror / Atom feed
From: Eric Leblond <eric@regit.org>
To: "Ethy H. Brito" <ethy.brito@inexo.com.br>
Cc: netfilter@vger.kernel.org
Subject: Re: conntrack mysql database. Plausible?
Date: Wed, 07 Nov 2012 18:46:02 +0100	[thread overview]
Message-ID: <1352310362.14921.2.camel@tourtet> (raw)
In-Reply-To: <20121107151118.1976dd3f@pulsar>

Hi,

Le mercredi 07 novembre 2012 à 15:11 -0200, Ethy H. Brito a écrit :
> Hi All
> 
> Is it possible to (or how to) maintain a mysql database with the assured
> connections' time range?

You can do that easily with ulogd2. Just setup and use the following
stack and you will have what you want:
stack=ct1:NFCT,ip2bin1:IP2BIN,mysql2:MYSQL

BR,

> Something like: time ASSURE'd, time DESTROYed, and the 5'tuple IPs dst and
> src, ports dst and src and protocol.
> 
> Have you guys seem something like this?
> 
> This would be useful to point out which clients behind a NAT accessed in
> the last few days.
> 
> Regards
> Ethy
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html



      reply	other threads:[~2012-11-07 17:46 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2012-11-07 17:11 conntrack mysql database. Plausible? Ethy H. Brito
2012-11-07 17:46 ` Eric Leblond [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1352310362.14921.2.camel@tourtet \
    --to=eric@regit.org \
    --cc=ethy.brito@inexo.com.br \
    --cc=netfilter@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.