]>
Commit | Line | Data |
---|---|---|
1 | # IPFire configuration for ulogd | |
2 | ||
3 | [global] | |
4 | ###################################################################### | |
5 | # GLOBAL OPTIONS | |
6 | ###################################################################### | |
7 | ||
8 | # loglevel: debug(1), info(3), notice(5), error(7) or fatal(8) | |
9 | loglevel=7 | |
10 | ||
11 | ###################################################################### | |
12 | # PLUGIN OPTIONS | |
13 | ###################################################################### | |
14 | ||
15 | # We have to configure and load all the plugins we want to use | |
16 | ||
17 | # general rules: | |
18 | # 1. load the plugins _first_ from the global section | |
19 | # 2. options for each plugin in seperate section below | |
20 | ||
21 | plugin="/usr/lib/ulogd/ulogd_inppkt_NFLOG.so" | |
22 | #plugin="/usr/lib/ulogd/ulogd_inppkt_ULOG.so" | |
23 | plugin="/usr/lib/ulogd/ulogd_inpflow_NFCT.so" | |
24 | plugin="/usr/lib/ulogd/ulogd_filter_IFINDEX.so" | |
25 | plugin="/usr/lib/ulogd/ulogd_filter_IP2STR.so" | |
26 | plugin="/usr/lib/ulogd/ulogd_filter_IP2BIN.so" | |
27 | plugin="/usr/lib/ulogd/ulogd_filter_PRINTPKT.so" | |
28 | plugin="/usr/lib/ulogd/ulogd_filter_HWHDR.so" | |
29 | plugin="/usr/lib/ulogd/ulogd_filter_PRINTFLOW.so" | |
30 | #plugin="/usr/lib/ulogd/ulogd_filter_MARK.so" | |
31 | #plugin="/usr/lib/ulogd/ulogd_output_LOGEMU.so" | |
32 | plugin="/usr/lib/ulogd/ulogd_output_SYSLOG.so" | |
33 | #plugin="/usr/lib/ulogd/ulogd_output_OPRINT.so" | |
34 | #plugin="/usr/lib/ulogd/ulogd_output_NACCT.so" | |
35 | #plugin="/usr/lib/ulogd/ulogd_output_PCAP.so" | |
36 | #plugin="/usr/lib/ulogd/ulogd_output_PGSQL.so" | |
37 | #plugin="/usr/lib/ulogd/ulogd_output_MYSQL.so" | |
38 | #plugin="/usr/lib/ulogd/ulogd_output_DBI.so" | |
39 | plugin="/usr/lib/ulogd/ulogd_output_SQLITE3.so" | |
40 | plugin="/usr/lib/ulogd/ulogd_raw2packet_BASE.so" | |
41 | ||
42 | # Log packets | |
43 | stack=src-pkt:NFLOG,base:BASE,ifindex:IFINDEX,ip2str:IP2STR,hw:HWHDR,db-packets:SQLITE3 | |
44 | stack=src-pkt:NFLOG,base:BASE,ifindex:IFINDEX,ip2str:IP2STR,print:PRINTPKT,syslog:SYSLOG | |
45 | ||
46 | # Log connection tracking events | |
47 | stack=src-ct:NFCT,ip2bin:IP2BIN,ip2str:IP2STR,print-flow:PRINTFLOW,db-flows:SQLITE3 | |
48 | ||
49 | [src-pkt] | |
50 | group=0 | |
51 | bind=1 | |
52 | ||
53 | [src-ct] | |
54 | # Only receive DESTROY events | |
55 | event_mask=0x00000004 | |
56 | hash_enable=1 | |
57 | ||
58 | [db-packets] | |
59 | db=/var/lib/ulogd/ulogd.db | |
60 | table=hits | |
61 | ||
62 | [db-flows] | |
63 | db=/var/lib/ulogd/ulogd.db | |
64 | table=flows |