* What is the GPRINT output plugin for?
@ 2021-11-30 2:30 Vladimir Nikishkin
2022-01-04 11:24 ` Pablo Neira Ayuso
0 siblings, 1 reply; 2+ messages in thread
From: Vladimir Nikishkin @ 2021-11-30 2:30 UTC (permalink / raw)
To: netfilter
Dear Netfilter users,
I have been recently trying to find out how to efficiently log
suspicious packets passing through my firewall. While perusing ulogd2
examples, as well as netfilter mailing list, I found about the existence
of the GPRINT output plugin.
However, the basic stack suggested in ulogd.conf:
```
stack=log4:NFLOG,gp1:GPRINT
```
did not really work for me, ulogd was complaining about
```
ulogd.c:854 type mismatch between GPRINT and NFLOG in stack
```
And the log file was empty.
I haven't found any other documentation for GPRINT.
What is it and what is it for?
--
Your sincerely,
Vladimir Nikishkin (MiEr, lockywolf)
(Laptop)
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: What is the GPRINT output plugin for?
2021-11-30 2:30 What is the GPRINT output plugin for? Vladimir Nikishkin
@ 2022-01-04 11:24 ` Pablo Neira Ayuso
0 siblings, 0 replies; 2+ messages in thread
From: Pablo Neira Ayuso @ 2022-01-04 11:24 UTC (permalink / raw)
To: Vladimir Nikishkin; +Cc: netfilter
On Tue, Nov 30, 2021 at 10:30:17AM +0800, Vladimir Nikishkin wrote:
> Dear Netfilter users,
>
> I have been recently trying to find out how to efficiently log
> suspicious packets passing through my firewall. While perusing ulogd2
> examples, as well as netfilter mailing list, I found about the existence
> of the GPRINT output plugin.
>
> However, the basic stack suggested in ulogd.conf:
> ```
> stack=log4:NFLOG,gp1:GPRINT
> ```
> did not really work for me, ulogd was complaining about
> ```
> ulogd.c:854 type mismatch between GPRINT and NFLOG in stack
This is a bug:
https://patchwork.ozlabs.org/project/netfilter-devel/patch/20220104112056.4034-1-pablo@netfilter.org/
> ```
> And the log file was empty.
>
> I haven't found any other documentation for GPRINT.
> What is it and what is it for?
Yet another output plugin which displays every field brought to you bu
the input plugin feeder.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2022-01-04 11:24 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2021-11-30 2:30 What is the GPRINT output plugin for? Vladimir Nikishkin
2022-01-04 11:24 ` Pablo Neira Ayuso
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox