netfilter-devel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* nflog_bind_group() question
@ 2009-12-01 10:44 Fred Leeflang
  2009-12-01 10:49 ` Patrick McHardy
  0 siblings, 1 reply; 2+ messages in thread
From: Fred Leeflang @ 2009-12-01 10:44 UTC (permalink / raw)
  To: netfilter-devel; +Cc: vuurmuur-devel

Hi devs,

We've recently implemented NFLOG support in vuurmuur, I've written an
article on the effort here
http://wordpress.3dn.nl/2009/11/25/iptabes-nflog-support-in-vuurmuur/

I'm curious about something I found out in the process. I've had
ulogd2 running alongside vuurmuur for a while and configured it to
listen to a specific nflog-group. When I had ulogd2 running I would
not be able to run vuurmuur_log which also listens to an nflog-group.
It took me a while to realize that it would not work because of having
ulogd2 running and both trying to listen to the SAME nflog-group.

Does this mean that it's not possible for two applications at the same
time to get netfilter_log messages from the same nflog-group?

-Fred

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: nflog_bind_group() question
  2009-12-01 10:44 nflog_bind_group() question Fred Leeflang
@ 2009-12-01 10:49 ` Patrick McHardy
  0 siblings, 0 replies; 2+ messages in thread
From: Patrick McHardy @ 2009-12-01 10:49 UTC (permalink / raw)
  To: Fred Leeflang; +Cc: netfilter-devel, vuurmuur-devel

Fred Leeflang wrote:
> Hi devs,
> 
> We've recently implemented NFLOG support in vuurmuur, I've written an
> article on the effort here
> http://wordpress.3dn.nl/2009/11/25/iptabes-nflog-support-in-vuurmuur/
> 
> I'm curious about something I found out in the process. I've had
> ulogd2 running alongside vuurmuur for a while and configured it to
> listen to a specific nflog-group. When I had ulogd2 running I would
> not be able to run vuurmuur_log which also listens to an nflog-group.
> It took me a while to realize that it would not work because of having
> ulogd2 running and both trying to listen to the SAME nflog-group.
> 
> Does this mean that it's not possible for two applications at the same
> time to get netfilter_log messages from the same nflog-group?

That is correct, nfnetlink_log uses unicast messages to the process
bound to the group. I'd also prefer if we had used multicast messaging,
but that can't be easily changed now.

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2009-12-01 10:49 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2009-12-01 10:44 nflog_bind_group() question Fred Leeflang
2009-12-01 10:49 ` Patrick McHardy

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).