From: Sven-Haegar Koch <haegar@sdinet.de>
To: Marco Moock <mm@dorfdsl.de>
Cc: netfilter@vger.kernel.org
Subject: Re: logging to a different place than kernel ring buffer
Date: Wed, 20 Nov 2024 21:52:44 +0100 (CET) [thread overview]
Message-ID: <e0c6b559-4e8c-ae0b-de3d-ede0d92607fb@sdinet.de> (raw)
In-Reply-To: <20241120210636.6df71d81@ryz.dorfdsl.de>
On Wed, 20 Nov 2024, Marco Moock wrote:
> I want to log denied traffic, but to syslog or a file rather than the
> kernel ring buffer because that messes up the virtual consoles.
>
> What is a good way to achieve that?
Ulogd2
https://www.netfilter.org/projects/ulogd/
c'ya
sven-haegar
--
Three may keep a secret, if two of them are dead.
- Ben F.
next prev parent reply other threads:[~2024-11-20 21:02 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-11-20 20:06 logging to a different place than kernel ring buffer Marco Moock
2024-11-20 20:52 ` Sven-Haegar Koch [this message]
2024-11-20 21:16 ` Jordan Dohms
[not found] ` <PH0PR05MB8159440DE55AAF8E8C6CFB9CB1212@PH0PR05MB8159.namprd05.prod.outlook.com>
2024-11-28 19:16 ` Marco Moock
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=e0c6b559-4e8c-ae0b-de3d-ede0d92607fb@sdinet.de \
--to=haegar@sdinet.de \
--cc=mm@dorfdsl.de \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox