Re: [ULOGD PATCH 1/3] Do not set oob.family in config as it can be found in packet.

[Peter Warasin <peter@endian.com>]

[-- Attachment #1: Type: text/plain, Size: 998 bytes --]

Hi Eric

Eric Leblond wrote:
> WHen using NFLOG or ULOG, obb.family (protocol IPv4 or IPv6) has
> to be setup manually in ulogd.conf configuration file. This was
> used to have the BASE filter parse accordingly the packet. This
> patch suppress oob.family as output keys of NFLOG and ULOG and let
> the BASE filter determine the family of the packet by itself (by
> parsing the raw header).

That field is necessary if NFLOG logging should also work from within
ebtables (I sent ebtables patches recently).
Sending from ebtables oob.family is AF_BRIDGE, since there could also
come arp packets to be logged.

Configuring the addressfamily manually within the configuration file
is how you then register the log handler for AF_BRIDGE. It is not
always necessary to have that handler registered, so it's good
practice to decide this by configuration file, i think.

What you say?

peter

-- 
:: e n d i a n
:: open source - open minds

:: peter warasin
:: http://www.endian.com   :: peter@endian.com

[-- Attachment #2: peter.vcf --]
[-- Type: text/x-vcard, Size: 279 bytes --]

begin:vcard
fn:Peter Warasin
n:;Peter Warasin
org:Endian GmbH/Srl
adr:;;Pillhof 47;Frangart/Frangarto;BZ;I-39010;Italien/Italia
email;internet:peter@endian.com
tel;work:+39 0471 631763
tel;fax:+39 0471 631764
x-mozilla-html:FALSE
url:http://www.endian.com
version:2.1
end:vcard