* ULOGD and other logs
@ 2010-09-13 13:12 ratheesh k
2010-09-13 13:33 ` Pablo Neira Ayuso
0 siblings, 1 reply; 2+ messages in thread
From: ratheesh k @ 2010-09-13 13:12 UTC (permalink / raw)
To: Netfilter mailing list, laforge
Hi ,
I am using ulogd to store iptables logs to /tmp/logfile.txt. There
is an application ( say X ) running on userspace ( using nfqueue in
FORWARD chain in filter table ) to do some kind of blocking packets
based on time ( some thing like a minimal parental control feature ).
I would also want to generate some logs and put into the same
/tmp/logfile.txt file. Since ulogd and X are using same file , we
need some file locking mechanism. Is there any other way to forward
these message to netlink socket and ulogd can itself handle, so that i
dont have to do any kind of synchronization.
May be i can put the question in this way: Kernel is sending some
message and ulogd listens and receives the message on netlink socket.
Could any other application in userspace , send some message to
this socket and ulogd can read and write to the log file f ?
Thanks,
Ratheesh
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: ULOGD and other logs
2010-09-13 13:12 ULOGD and other logs ratheesh k
@ 2010-09-13 13:33 ` Pablo Neira Ayuso
0 siblings, 0 replies; 2+ messages in thread
From: Pablo Neira Ayuso @ 2010-09-13 13:33 UTC (permalink / raw)
To: ratheesh k; +Cc: Netfilter mailing list, laforge, Eric Leblond, chifflier
On 13/09/10 15:12, ratheesh k wrote:
> Hi ,
>
> I am using ulogd to store iptables logs to /tmp/logfile.txt. There
> is an application ( say X ) running on userspace ( using nfqueue in
> FORWARD chain in filter table ) to do some kind of blocking packets
> based on time ( some thing like a minimal parental control feature ).
> I would also want to generate some logs and put into the same
> /tmp/logfile.txt file. Since ulogd and X are using same file , we
> need some file locking mechanism. Is there any other way to forward
> these message to netlink socket and ulogd can itself handle, so that i
> dont have to do any kind of synchronization.
>
> May be i can put the question in this way: Kernel is sending some
> message and ulogd listens and receives the message on netlink socket.
> Could any other application in userspace , send some message to
> this socket and ulogd can read and write to the log file f ?
There's the UNIX plugin for ulogd2 (not yet in mainline) that Eric
Leblond and Pierre Chifflier contributed time ago. However, some minor
issues prevented to push into mainline, any word on it, Eric, Pierre?
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2010-09-13 13:33 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2010-09-13 13:12 ULOGD and other logs ratheesh k
2010-09-13 13:33 ` Pablo Neira Ayuso
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox