[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Iptables logging

I've just about completed a port of fwanalog to be useful for us ipchains
folks, be on the lookout for it.

I am interested to know if ulogd/ulogd-mysql has any reporting
characteristics like fwanalog? It would be really nice to log my firewall
logs into a mysql database instead of flatfiles and then query the database
to pull out a analog report from it...


Daniel Stone schrieb am Samstag, den 14. April 2001:

> On Fri, Apr 13, 2001 at 11:52:46PM +0200, Kenneth Vestergaard Schmidt wrote:
> > Hi.
> > 
> > All you iptables-using people out there, maybe you should look at fwanalog, 
> > which just went into unstable. It parses the logged output (remember, -j LOG) 
> > from iptables into a format understood by analog, and then uses said program 
> > to create an (IMHO) nice log. If anybody would like to test it, please do, 
> > and send bug-reports, feature-improvements, etc, to either me or the 
> > mailling-list fwanalog@tud.at
> I'm also preparing ulogd and ulogd-mysql, which is IMHO a much nicer
> solution.
> You need the ulog patch from patch-o-matic in your kernel for it to work,
> but it logs to a file, in its own format, a syslog-like file, and, if you
> have ulogd-mysql, a mySQL database. 
> It's extremely modular and extensible, so you can write your own output and
> interpreter plugins; ulogd-remote, which will log to a remote host, either
> to separate client or maybe another machine's ulogd, is currently on my
> vapourware-but-sounds-cool list ;)
> But, um, looks good anyway, the output of -j LOG is suckage.
> :) d
> -- 
> Daniel Stone
> Linux Kernel Developer
> daniel@kabuki.openfridge.net
> Version: 3.1
> G!>CS d s++:- a---- C++ ULS++++$>B P---- L+++>++++ E+(joe)>+++ W++ N->++ !o
> K? w++(--) O---- M- V-- PS+++ PE- Y PGP>++ t--- 5-- X- R- tv-(!) b+++ DI+++ 
> D+ G e->++ h!(+) r+(%) y? UF++
> ------END GEEK CODE BLOCK------
> --  
> To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Reply to: