conntrack mysql database. Plausible?

conntrack mysql database. Plausible?

[Ethy H. Brito]

Hi All

Is it possible to (or how to) maintain a mysql database with the assured
connections' time range?

Something like: time ASSURE'd, time DESTROYed, and the 5'tuple IPs dst and
src, ports dst and src and protocol.

Have you guys seem something like this?

This would be useful to point out which clients behind a NAT accessed in
the last few days.

Regards
Ethy

Re: conntrack mysql database. Plausible?

[Eric Leblond]

Hi,

Le mercredi 07 novembre 2012 à 15:11 -0200, Ethy H. Brito a écrit :
> Hi All
> 
> Is it possible to (or how to) maintain a mysql database with the assured
> connections' time range?

You can do that easily with ulogd2. Just setup and use the following
stack and you will have what you want:
stack=ct1:NFCT,ip2bin1:IP2BIN,mysql2:MYSQL

BR,

> Something like: time ASSURE'd, time DESTROYed, and the 5'tuple IPs dst and
> src, ports dst and src and protocol.
> 
> Have you guys seem something like this?
> 
> This would be useful to point out which clients behind a NAT accessed in
> the last few days.
> 
> Regards
> Ethy
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html