Re: SVN ULOG2

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



In the case when "ulog2" instead "ulog" in the config - it fails even
sooner. See output below... I noticed that there is no table ulog, but
since it 's written so in sample config file, and there is a view,
named "ulog" in the DB schema - I supposed that should be so. The
"timestamp" row it's failing - passed normally when "ulog" table is
used.

Thu Apr 10 20:39:54 2008 <1> ulogd.c:705 assigning `ip.csum(?)' as
source for PGSQL(ip.csum)
Thu Apr 10 20:39:54 2008 <1> ulogd.c:605 base1(BASE)
Thu Apr 10 20:39:54 2008 <1> ulogd.c:705 assigning `ip.id(?)' as
source for PGSQL(ip.id)
Thu Apr 10 20:39:54 2008 <1> ulogd.c:605 base1(BASE)
Thu Apr 10 20:39:54 2008 <1> ulogd.c:705 assigning `ip.fragoff(?)' as
source for PGSQL(ip.fragoff)
Thu Apr 10 20:39:54 2008 <7> ulogd.c:699 cannot find key `timestamp' in stack
Thu Apr 10 20:39:54 2008 <1> ulogd.c:831 destroying stack
Thu Apr 10 20:39:54 2008 <8> ulogd.c:1084 not even a single working plugin stack

Regards,
Anton.

2008/4/10, Eric Leblond <eric@xxxxxx>:
> Hello,
>
>
>  > One more issue (though not sure is I did not miss something in
>  > configuration)
>  >
>  > Trying to do Postgresql logging. Postgres 8.3
>  > This is the entry, ulogd fails initializing on.
>  >
>  > Thu Apr 10 18:02:26 2008 <7> ulogd.c:699 cannot find key
>  > `mac.saddr.str' in stack
>  > Thu Apr 10 18:02:26 2008 <1> ulogd.c:831 destroying stack
>  > Thu Apr 10 18:02:26 2008 <8> ulogd.c:1084 not even a single working plugin
>  > stack
>
>
> Ok, it seems you've pointed to the wrong 'table' option. You should not
>  point to ulog but to ulog2_ct.
>  But you will next have to set 'procedure' to a hmmm not yet written in
>  Postgres function ...
>
>  I do not have the time to do it now but I think you can easily write one
>  based on the INSERT_CT function in mysql schema.
>
>  BR,
>
> --
>  Eric Leblond
>  INL : http://www.inl.fr
>  NuFW, Now User Filtering Works (http://www.nufw.org)
>
>
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux