User Tools

Site Tools


doc:appunti:linux:sa:ulogd2

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
doc:appunti:linux:sa:ulogd2 [2025/04/03 12:25] – [/etc/ulogd.conf] niccolodoc:appunti:linux:sa:ulogd2 [2025/04/03 12:43] (current) – [/etc/logrotate.d/ulogd2] niccolo
Line 79: Line 79:
  
 So if I want to track new and destroyed connections, the event_mask mus be set to 0x00000001 + 0x00000004 = 0x00000005. So if I want to track new and destroyed connections, the event_mask mus be set to 0x00000001 + 0x00000004 = 0x00000005.
 +
 +==== Logging bytes_sent and bytes_received ====
 +
 +Check that conntrack has the **bytes=** field in this output:
 +
 +<code>
 +conntrack -L -o extended
 +</code>
 +
 +Run the following:
 +
 +<code>
 +sysctl -w net.netfilter.nf_conntrack_acct=1
 +</code>
 +
 +for permanent setting across reboot create the file **/etc/sysctl.d/99-nf_conntrack_acct.conf** with:
 +
 +<file>
 +net.netfilter.nf_conntrack_acct=1
 +</file>
 +
 +
  
 ==== /etc/logrotate.d/ulogd2 ==== ==== /etc/logrotate.d/ulogd2 ====
doc/appunti/linux/sa/ulogd2.txt · Last modified: 2025/04/03 12:43 by niccolo