From: Eric Leblond <eric@inl.fr>
To: netfilter-devel@vger.kernel.org
Subject: [ULOGD PATCH 0/14] Misc improvements and bugfixes
Date: Sun, 23 Mar 2008 17:25:08 +0100 [thread overview]
Message-ID: <1206289522679-git-send-email-eric@inl.fr> (raw)
Hello,
This patchset contains some code cleaning and two structural changes.
The first four patches are code cleaning:
* Fix SQL reconnection algorithm.
* Suppress ip_as_string configuration variable.
* Fix type of raw.mac_len key in NFLOG.
* Fix type of raw.mac_len key in ULOG.
The next set is more interesting as it introduces handling of MAC address
via a dedicated module named MAC2STR. Source hardware address is now stored
in a dedicated table of the MySQL and pgSQL databases.
Patches which implement this modification are:
* New MAC2STR plugin for hwmac address conversion.
* MAC address handling in MySQL output plugin.
* MAC address handling in PgSQL output plugin.
The next set of patches try to solve a classical netfilter logging problem. As
logging is not a verdict, it is not possible to know in userspace if a packet
has been accepted or dropped. A frequent workaround is to use the prefix of the
ULOG or NFLOG target to indicate the decision taken on the packet.
The idea behind this patchset is to dedicate a group (and a plugin instance in
ulogd2) to accepted packets and an other instance to dropped packets. To
differentiate the instances a new option, state, has been added to NFLOG and
ULOG plugins. Default value of the option is 0 which is NF_DROP value.
The value of the option is sent to the output module as "raw.state" key. This
value is stored in a dedicated table of the PgSQL and MySQL output modules.
This modification is implemented in the following patches:
* Add state option to NFLOG input plugin.
* Add state support to MySQL schema.
* Add state option to ULOG input plugin.
* Add state support to PGSQL output module.
The remaining patches are :
* Add hook output to ULOG input module.
* Update default configuration to fit last changes.
* Fix computation of length of mac address.
Patchset statistics :
doc/mysql-ulogd2.sql | 78 +++++++++++++++-----------
doc/pgsql-ulogd2.sql | 59 +++++++++++++++++---
filter/Makefile.am | 6 ++-
filter/ulogd_filter_MAC2STR.c | 111 +++++++++++++++++++++++++++++++++++++
include/ulogd/db.h | 13 ++---
input/packet/ulogd_inppkt_NFLOG.c | 26 +++++++-
input/packet/ulogd_inppkt_ULOG.c | 33 ++++++++++-
ulogd.conf.in | 10 +++-
util/db.c | 20 ++----
util/printpkt.c | 2 +-
10 files changed, 286 insertions(+), 72 deletions(-)
BR,
--
Eric Leblond
INL: http://www.inl.fr/
NuFW: http://www.nufw.org/
next reply other threads:[~2008-03-23 16:25 UTC|newest]
Thread overview: 49+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-03-23 16:25 Eric Leblond [this message]
2008-03-23 16:25 ` [ULOGD PATCH 01/14] Fix SQL reconnection algorithm Eric Leblond
2008-04-05 13:55 ` Pablo Neira Ayuso
2008-03-23 16:25 ` [ULOGD PATCH 02/14] Suppress ip_as_string configuration variable Eric Leblond
2008-04-05 15:05 ` Pablo Neira Ayuso
2008-04-05 19:00 ` Eric Leblond
2008-04-07 23:50 ` Pablo Neira Ayuso
2008-03-23 16:25 ` [ULOGD PATCH 03/14] Fix type of raw.mac_len key in NFLOG Eric Leblond
2008-04-05 14:30 ` Pablo Neira Ayuso
2008-03-23 16:25 ` [ULOGD PATCH 04/14] Fix type of raw.mac_len key in ULOG Eric Leblond
2008-04-05 14:33 ` Pablo Neira Ayuso
2008-03-23 16:25 ` [ULOGD PATCH 05/14] New MAC2STR plugin for hwmac address conversion Eric Leblond
2008-04-05 14:35 ` Pablo Neira Ayuso
2008-03-23 16:25 ` [ULOGD PATCH 06/14] MAC address handling in MySQL output plugin Eric Leblond
2008-04-05 14:51 ` Pablo Neira Ayuso
2008-04-05 19:03 ` Eric Leblond
2008-04-07 23:52 ` Pablo Neira Ayuso
2008-03-23 16:25 ` [ULOGD PATCH 07/14] MAC address handling in PgSQL " Eric Leblond
2008-04-05 14:52 ` Pablo Neira Ayuso
2008-03-23 16:25 ` [ULOGD PATCH 08/14] Add state option to NFLOG input plugin Eric Leblond
2008-04-05 15:10 ` Pablo Neira Ayuso
2008-04-05 19:15 ` Eric Leblond
2008-04-07 23:56 ` Pablo Neira Ayuso
2008-04-10 4:56 ` Eric Leblond
2008-04-13 7:03 ` Eric Leblond
2008-04-16 11:39 ` Pablo Neira Ayuso
2008-04-16 13:22 ` [ULOGD PATCH 0/7] Resend, add label to SQL logging Eric Leblond
2008-04-16 13:22 ` [ULOGD PATCH 1/7] Add label option to NFLOG input plugin Eric Leblond
2008-04-27 7:27 ` Pablo Neira Ayuso
2008-04-27 8:44 ` Eric Leblond
2008-04-28 13:44 ` Pablo Neira Ayuso
2008-04-28 13:53 ` [ULOGD PATCH 0/3] Resend: rename label to numeric_label Eric Leblond
2008-04-28 13:53 ` [PATCH 1/3] Add numeric_label option to ULOG input plugin Eric Leblond
2008-04-28 13:53 ` [PATCH 2/3] Add numeric_label option to NFLOG " Eric Leblond
2008-04-28 13:53 ` [PATCH 3/3] Update default configuration to fit last changes Eric Leblond
2008-04-29 14:26 ` [ULOGD PATCH 0/3] Resend: rename label to numeric_label Pablo Neira Ayuso
2008-04-16 13:22 ` [ULOGD PATCH 2/7] Add label support to MySQL schema Eric Leblond
2008-04-16 13:22 ` [ULOGD PATCH 3/7] Add label option to ULOG input plugin Eric Leblond
2008-04-16 13:22 ` [ULOGD PATCH 4/7] Add hook output to ULOG input module Eric Leblond
2008-04-16 13:22 ` [ULOGD PATCH 5/7] Add label support to PGSQL output module Eric Leblond
2008-04-16 13:22 ` [ULOGD PATCH 6/7] Update default configuration to fit last changes Eric Leblond
2008-04-16 13:22 ` [ULOGD PATCH 7/7] Convert SQL procedure to function in MySQL plugins Eric Leblond
2008-03-23 16:25 ` [ULOGD PATCH 09/14] Add state support to MySQL schema Eric Leblond
2008-03-23 16:25 ` [ULOGD PATCH 10/14] Add state option to ULOG input plugin Eric Leblond
2008-03-23 16:25 ` [ULOGD PATCH 11/14] Add hook output to ULOG input module Eric Leblond
2008-03-23 16:25 ` [ULOGD PATCH 12/14] Add state support to PGSQL output module Eric Leblond
2008-03-23 16:25 ` [ULOGD PATCH 13/14] Update default configuration to fit last changes Eric Leblond
2008-03-23 16:25 ` [ULOGD PATCH 14/14] Fix computation of length of mac address Eric Leblond
2008-04-05 14:56 ` Pablo Neira Ayuso
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1206289522679-git-send-email-eric@inl.fr \
--to=eric@inl.fr \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox