Subversion Repositories ALCASAR

Rev

Rev 1375 | Go to most recent revision | Show entire file | Ignore whitespace | Details | Blame | Last modification | View Log

Rev 1375 Rev 1452
Line 1... Line 1...
1 
# Example of a simple configuration for ulogd with ALCASAR
 1 
# Example of a simple configuration for ulogd with ALCASAR
2 
 
 2 
 
3 
[global]
 3 
[global]
- 
 
 4 
 
4 
######################################################################
 5 
######################################################################
5 
# GLOBAL OPTIONS
 6 
# GLOBAL OPTIONS
6 
######################################################################
 7 
######################################################################
7 
 
 8 
 
8 
# netlink multicast group (the same as the iptables --ulog-nlgroup param)
 9 
user="ulogd"
9 
nlgroup=1
 10 
group="ulogd"
10 
 
 11 
 
11 
# logfile for status messages
 12 
# logfile for status messages
12 
logfile="/var/log/ulogd.log"
 13 
logfile="/var/log/ulogd/ulogd.log"
13 
 
 - 
 
14 
# loglevel: debug(1), info(3), notice(5), error(7) or fatal(8)
 - 
 
15 
loglevel=5
 - 
 
16 
 
 14 
 
17 
# socket receive buffer size (should be at least the size of the
 15 
# loglevel: debug(1), info(3), notice(5), error(7) or fatal(8) (default 5)
18 
# in-kernel buffer (ipt_ULOG.o 'nlbufsiz' parameter)
 - 
 
19 
rmem=131071
 16 
#loglevel=8
20 
 
 17 
 
21 
# libipulog/ulogd receive buffer size, should be > rmem
 - 
 
22 
bufsize=150000
 - 
 
23 
 
 18 
 
24 
######################################################################
 19 
######################################################################
25 
# PLUGIN OPTIONS
 20 
# PLUGIN OPTIONS
26 
######################################################################
 21 
######################################################################
27 
 
 22 
 
Line 29... Line 24...
29 
 
 24 
 
30 
# general rules:
 25 
# general rules:
31 
# 1. load the plugins _first_ from the global section
 26 
# 1. load the plugins _first_ from the global section
32 
# 2. options for each plugin in seperate section below
 27 
# 2. options for each plugin in seperate section below
33 
 
 28 
 
- 
 
 29 
plugin="/usr/lib64/ulogd/ulogd_inppkt_ULOG.so"
- 
 
 30 
plugin="/usr/lib64/ulogd/ulogd_filter_IFINDEX.so"
- 
 
 31 
plugin="/usr/lib64/ulogd/ulogd_filter_IP2STR.so"
- 
 
 32 
plugin="/usr/lib64/ulogd/ulogd_filter_PRINTPKT.so"
34 
# ulogd_BASE.so - interpreter plugin for basic IPv4 header fields
 33 
plugin="/usr/lib64/ulogd/ulogd_filter_PRINTFLOW.so"
- 
 
 34 
plugin="/usr/lib64/ulogd/ulogd_output_LOGEMU.so"
35 
plugin="/usr/lib64/ulogd/ulogd_BASE.so"
 35 
plugin="/usr/lib64/ulogd/ulogd_raw2packet_BASE.so"
36 
 
 36 
 
37 
# output plugins.
37 
# this is a stack for ULOG packet-based logging via LOGEMU
38 
plugin="/usr/lib64/ulogd/ulogd_LOGEMU.so"
 38 
stack=ulog1:ULOG,base1:BASE,ip2str1:IP2STR,print1:PRINTPKT,emu1:LOGEMU
39 
 
 39 
 
- 
 
 40 
[ulog1]
- 
 
 41 
nlgroup=CHANGEVALUE