ulogd2/ulogd.conf

   1 # IPFire configuration for ulogd
   2
   3 [global]
   4 ######################################################################
   5 # GLOBAL OPTIONS
   6 ######################################################################
   7
   8 # loglevel: debug(1), info(3), notice(5), error(7) or fatal(8)
   9 loglevel=7
  10
  11 ######################################################################
  12 # PLUGIN OPTIONS
  13 ######################################################################
  14
  15 # We have to configure and load all the plugins we want to use
  16
  17 # general rules:
  18 # 1. load the plugins _first_ from the global section
  19 # 2. options for each plugin in seperate section below
  20
  21 plugin="/usr/lib/ulogd/ulogd_inppkt_NFLOG.so"
  22 #plugin="/usr/lib/ulogd/ulogd_inppkt_ULOG.so"
  23 plugin="/usr/lib/ulogd/ulogd_inpflow_NFCT.so"
  24 plugin="/usr/lib/ulogd/ulogd_filter_IFINDEX.so"
  25 plugin="/usr/lib/ulogd/ulogd_filter_IP2STR.so"
  26 plugin="/usr/lib/ulogd/ulogd_filter_IP2BIN.so"
  27 plugin="/usr/lib/ulogd/ulogd_filter_PRINTPKT.so"
  28 plugin="/usr/lib/ulogd/ulogd_filter_HWHDR.so"
  29 plugin="/usr/lib/ulogd/ulogd_filter_PRINTFLOW.so"
  30 #plugin="/usr/lib/ulogd/ulogd_filter_MARK.so"
  31 #plugin="/usr/lib/ulogd/ulogd_output_LOGEMU.so"
  32 plugin="/usr/lib/ulogd/ulogd_output_SYSLOG.so"
  33 #plugin="/usr/lib/ulogd/ulogd_output_OPRINT.so"
  34 #plugin="/usr/lib/ulogd/ulogd_output_NACCT.so"
  35 #plugin="/usr/lib/ulogd/ulogd_output_PCAP.so"
  36 #plugin="/usr/lib/ulogd/ulogd_output_PGSQL.so"
  37 #plugin="/usr/lib/ulogd/ulogd_output_MYSQL.so"
  38 #plugin="/usr/lib/ulogd/ulogd_output_DBI.so"
  39 plugin="/usr/lib/ulogd/ulogd_output_SQLITE3.so"
  40 plugin="/usr/lib/ulogd/ulogd_raw2packet_BASE.so"
  41
  42 # Log packets
  43 stack=src-pkt:NFLOG,base:BASE,ifindex:IFINDEX,ip2str:IP2STR,hw:HWHDR,db-packets:SQLITE3
  44 stack=src-pkt:NFLOG,base:BASE,ifindex:IFINDEX,ip2str:IP2STR,print:PRINTPKT,syslog:SYSLOG
  45
  46 # Log connection tracking events
  47 stack=src-ct:NFCT,ip2bin:IP2BIN,ip2str:IP2STR,print-flow:PRINTFLOW,db-flows:SQLITE3
  48
  49 [src-pkt]
  50 group=0
  51 bind=1
  52
  53 [src-ct]
  54 # Only receive DESTROY events
  55 event_mask=0x00000004
  56 hash_enable=1
  57
  58 [db-packets]
  59 db=/var/lib/ulogd/ulogd.db
  60 table=hits
  61
  62 [db-flows]
  63 db=/var/lib/ulogd/ulogd.db
  64 table=flows