Pablo Neira Ayuso wrote: >> Am I missing something ? > > I have added BSF support to libnetfilter_conntrack. This could be > interesting to filter ctnetlink event messages from kernel-space. You > can find an example in the configuration file of conntrackd, see the > Filter clause. > > The problem is the current configuration file format which is quite > cryptic. Using something flex/bison-based would be more flexible, but we > have to think about the file format before. > > I have other concerns, I'm willing to schedule some time for ulogd to > make a new TODO list, we can probably discuss them during the workshop. I forgot to mention that the IPFIX plugin is currently broken. -- "Los honestos son inadaptados sociales" -- Les Luthiers -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html