From: Eric Leblond <eric@inl.fr>
To: netfilter-devel@vger.kernel.org
Cc: Eric Leblond <eric@inl.fr>
Subject: [PATCH 4/6] ulogd.conf: add a complex but useful stack example
Date: Wed, 22 Sep 2010 02:47:20 +0200 [thread overview]
Message-ID: <1285116442-32490-5-git-send-email-eric@inl.fr> (raw)
In-Reply-To: <1285116442-32490-1-git-send-email-eric@inl.fr>
This patch adds a complex but useful stack example. It was
undocumented that multiple output plugin can be used in the
same stack.
This patch change a variable name to fix some example stacks.
Signed-off-by: Eric Leblond <eric@inl.fr>
---
ulogd.conf.in | 7 +++++--
1 files changed, 5 insertions(+), 2 deletions(-)
diff --git a/ulogd.conf.in b/ulogd.conf.in
index de5bc11..75b4880 100644
--- a/ulogd.conf.in
+++ b/ulogd.conf.in
@@ -58,6 +58,9 @@ plugin="@libdir@/ulogd/ulogd_raw2packet_BASE.so"
# this is a stack for packet-based logging via LOGEMU with filtering on MARK
#stack=log2:NFLOG,mark1:MARK,base1:BASE,ifi1:IFINDEX,ip2str1:IP2STR,print1:PRINTPKT,emu1:LOGEMU
+# this is a stack for packet-based logging via SYSLOG and logging to LOGEMU after filtering on MARK
+#stack=log2:NFLOG,base1:BASE,ifi1:IFINDEX,ip2str1:IP2STR,print1:PRINTPKT,sys1:SYSLOG,mark1:MARK,emu1:LOGEMU
+
# this is a stack for flow-based logging via LOGEMU
#stack=ct1:NFCT,ip2str1:IP2STR,print1:PRINTFLOW,emu1:LOGEMU
@@ -209,8 +212,8 @@ table="ulog"
pass="ulog2"
procedure="INSERT_PACKET_FULL"
-[sys2]
-facility=LOG_LOCAL2
+[sys1]
+facility=LOG_LOCAL1
[nacct1]
sync = 1
--
1.6.1
next prev parent reply other threads:[~2010-09-22 0:54 UTC|newest]
Thread overview: 15+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-09-22 0:47 [ULOGD PATCH 0/6] misc improvements and code cleaning Eric Leblond
2010-09-22 0:47 ` [PATCH 1/6] build: nfct and nflog can be disabled via configure option Eric Leblond
2010-09-30 9:58 ` Pablo Neira Ayuso
2010-09-22 0:47 ` [PATCH 2/6] ulogd.conf: Comment library dependant plugins Eric Leblond
2010-09-30 9:51 ` Pablo Neira Ayuso
2010-09-30 21:23 ` Eric Leblond
2010-09-22 0:47 ` [PATCH 3/6] build: add debug configure flag Eric Leblond
2010-09-30 9:50 ` Pablo Neira Ayuso
2010-09-30 21:22 ` Eric Leblond
2010-10-01 22:22 ` Jan Engelhardt
2010-10-03 10:15 ` Pablo Neira Ayuso
2010-09-22 0:47 ` Eric Leblond [this message]
2010-09-22 0:47 ` [PATCH 5/6] filter_MARK: code factorization Eric Leblond
2010-09-22 0:47 ` [PATCH 6/6] ulogd: use snprintf instead of sprintf in printpkt Eric Leblond
2010-09-30 9:48 ` Pablo Neira Ayuso
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1285116442-32490-5-git-send-email-eric@inl.fr \
--to=eric@inl.fr \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).