Yes, it's loaded, here is the list of loaded modules. # lsmod|grep nf nf_conntrack_netlink 17040 0 nfnetlink_log 9396 1 xt_NFLOG nfnetlink 5176 5 nf_conntrack_netlink,nfnetlink_log nf_nat 19876 1 iptable_nat nf_conntrack_ipv4 14472 7 iptable_nat,nf_nat nf_defrag_ipv4 2240 1 nf_conntrack_ipv4 nf_conntrack 70624 7 xt_connbytes,nf_conntrack_netlink,xt_conntrack,iptable_nat,nf_nat,nf_conntrack_ipv4,sch_esfq # But I suppose it would not log any connections in case it's not? But it does some, but in unpredictable manner. 2009/6/24 Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>: > Pablo Neira Ayuso wrote: >> Anton VG wrote: >>> Hello! >>> >>> Just spent all night trying to get the %SUBJ% working, but been >>> unable. There is no any other example in whole internet other than >>> included into a package and >>> http://software.inl.fr/trac/wiki/ulogd2/user >>> >>> Ulogd starts, and tells that everything initialized - but >>> /var/log/ulogd_syslogemu.log - is always 0 bytes - no logging there. >> >> Is nf_conntrack_netlink loaded? >> >> I still have to send a patch to autoload to the kernel to add support >> for this autoload. > > Hm, I should read what I write before pushing "send" :-). I meant that, > for event listening, there's no autoload of the "nf_conntrack_netlink" > module yet. What you're reporting seems like a sympthon that this module > is missing. > -- > To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in > the body of a message to majordomo@xxxxxxxxxxxxxxx > More majordomo info at http://vger.kernel.org/majordomo-info.html > -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html