From: Patrick McHardy <kaber@trash.net>
To: "Dâniel Fraga" <fragabr@gmail.com>
Cc: netfilter-devel@vger.kernel.org, Pablo Neira Ayuso <pablo@netfilter.org>
Subject: Re: Every other char with LOG netfilter output (bug?)
Date: Thu, 30 Oct 2008 08:15:14 +0100 [thread overview]
Message-ID: <49095F02.7040104@trash.net> (raw)
In-Reply-To: <49094b22.0f87460a.09d2.55b6@mx.google.com>
Dâniel Fraga wrote:
> On Tue, 28 Oct 2008 19:13:33 +0100
> Patrick McHardy <kaber@trash.net> wrote:
>
>> I'm not familiar with ftrace, but you could manually instrument it
>> (net/ipv4/netfilter/ipt_LOG.c). I'd try nfnetlink_log first though.
>
> Hi Patrick, I installed ulogd2 with all necessary stuff. The
> normal log is working (with the default ulogd.conf), but how can I
> configure it to log the full packets? If you can provide me a sample
> configuration, I'll appreciate!
One thing you need is to specify the amount of bytes you want transfered
to userspace:
iptables ... -j NFLOG --nflog-range 65535
The printpkt output plugin doesn't log the full packet, but I'm not
sure how to configure the pcap plugin (or whether it works at all
in ulogd2, which is still somewhere between alpha and beta).
Pablo (CCed) might be able to help.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
next prev parent reply other threads:[~2008-10-30 7:15 UTC|newest]
Thread overview: 14+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-10-28 17:09 Every other char with LOG netfilter output (bug?) Dâniel Fraga
2008-10-28 17:40 ` Patrick McHardy
2008-10-28 17:57 ` Dâniel Fraga
2008-10-28 18:13 ` Patrick McHardy
2008-10-28 18:50 ` Jan Engelhardt
2008-10-28 18:53 ` Patrick McHardy
2008-10-28 19:16 ` Dâniel Fraga
2008-10-30 5:50 ` Dâniel Fraga
2008-10-30 7:15 ` Patrick McHardy [this message]
2008-10-30 15:02 ` Pablo Neira Ayuso
2008-10-30 23:23 ` Dâniel Fraga
2008-10-31 2:01 ` Dâniel Fraga
2008-11-03 12:42 ` Patrick McHardy
2008-11-03 15:41 ` Dâniel Fraga
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=49095F02.7040104@trash.net \
--to=kaber@trash.net \
--cc=fragabr@gmail.com \
--cc=netfilter-devel@vger.kernel.org \
--cc=pablo@netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.