Differences

This shows you the differences between two versions of the page.

--- doc:appunti:linux:sa:ulogd2 [2025/02/17 17:21] – niccolo
+++ doc:appunti:linux:sa:ulogd2 [2025/02/17 18:29] (current) – niccolo
@@ Line 7: / Line 7: @@
 === /etc/ulogd.conf ===
+We configure one **plugin stack** adding this line into the configuration file:
 <file>
-# Local configured stack for logging connections metadata.
+# Custom stack for logging connections metadata.
 stack=ct1:NFCT,ip2str1:IP2STR,print1:PRINTFLOW,emu1:LOGEMU
+</file>
+FIXME
+<file>
 [ct1]
 event_mask=0x00000001
 hash_enable=0
 </file>
+=== Plugin Stacks Explained ===
+  * Input plugin
+  * None, one or multiple filter plugins
+  * One output plugin
+In the example above we use the **NFCT** input plugin, which interfaces with the **nfnetlink_conntrack** kernel subsystem, and provides flow-based logging. FIXME
+The option **hash_enable** ... FIXME
 === /etc/logrotate.d/ulogd2 ===