<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<atom:link href="http://dev1galaxy.org/extern.php?action=feed&amp;tid=4909&amp;type=rss" rel="self" type="application/rss+xml" />
		<title><![CDATA[Dev1 Galaxy Forum / [SOLVED] nftables saving log with ulogd ?]]></title>
		<link>http://dev1galaxy.org/viewtopic.php?id=4909</link>
		<description><![CDATA[The most recent posts in [SOLVED] nftables saving log with ulogd ?.]]></description>
		<lastBuildDate>Fri, 25 Feb 2022 10:03:49 +0000</lastBuildDate>
		<generator>FluxBB</generator>
		<item>
			<title><![CDATA[Re: [SOLVED] nftables saving log with ulogd ?]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=34907#p34907</link>
			<description><![CDATA[<p>I found !!! The file was needed a LF at the end !!! <img src="http://dev1galaxy.org/img/smilies/lol.png" width="15" height="15" alt="lol" /></p>]]></description>
			<author><![CDATA[dummy@example.com (SpongeBOB)]]></author>
			<pubDate>Fri, 25 Feb 2022 10:03:49 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=34907#p34907</guid>
		</item>
		<item>
			<title><![CDATA[[SOLVED] nftables saving log with ulogd ?]]></title>
			<link>http://dev1galaxy.org/viewtopic.php?pid=34880#p34880</link>
			<description><![CDATA[<p>Hi everyone,</p><p>I followed this tutorial <a href="https://www.mybluelinux.com/how-nftables-log-to-external-file/" rel="nofollow">https://www.mybluelinux.com/how-nftable … rnal-file/</a></p><p>in order to save some nftable log into a different file than the default : <strong>/var/log/messages</strong> but It&#039;s not working <img src="http://dev1galaxy.org/img/smilies/hmm.png" width="15" height="15" alt="hmm" /> any ideas ?</p><p>here my ulogd.conf (all the # lines have been removed)</p><div class="codebox"><pre class="vscroll"><code>[global]
logfile=&quot;syslog&quot;
loglevel=3
stack=log1:NFLOG,base1:BASE,ifi1:IFINDEX,ip2str1:IP2STR,print1:PRINTPKT,emu1:LOGEMU
stack=log2:NFLOG,base1:BASE,ifi1:IFINDEX,ip2str1:IP2STR,print1:PRINTPKT,emu2:LOGEMU

[ct1]

[ct2]
hash_enable=0

[log1]
group=0

[ulog1]
nlgroup=1

[nuauth1]
socket_path=&quot;/tmp/nuauth_ulogd2.sock&quot;

[emu1]
file=&quot;/var/log/ulog/syslogemu.log&quot;
sync=1

[op1]
file=&quot;/var/log/ulog/oprint.log&quot;
sync=1

[gp1]
file=&quot;/var/log/ulog/gprint.log&quot;
sync=1
timestamp=1

[xml1]
directory=&quot;/var/log/ulog/&quot;
sync=1

[json1]
sync=1

[pcap1]
sync=1

[mysql1]
db=&quot;nulog&quot;
host=&quot;localhost&quot;
user=&quot;nupik&quot;
table=&quot;ulog&quot;
pass=&quot;changeme&quot;
procedure=&quot;INSERT_PACKET_FULL&quot;

[mysql2]
db=&quot;nulog&quot;
host=&quot;localhost&quot;
user=&quot;nupik&quot;
table=&quot;conntrack&quot;
pass=&quot;changeme&quot;
procedure=&quot;INSERT_CT&quot;

[pgsql1]
db=&quot;nulog&quot;
host=&quot;localhost&quot;
user=&quot;nupik&quot;
table=&quot;ulog&quot;
pass=&quot;changeme&quot;
procedure=&quot;INSERT_PACKET_FULL&quot;

[pgsql2]
db=&quot;nulog&quot;
host=&quot;localhost&quot;
user=&quot;nupik&quot;
table=&quot;ulog2_ct&quot;
pass=&quot;changeme&quot;
procedure=&quot;INSERT_CT&quot;

[pgsql3]
db=&quot;nulog&quot;
host=&quot;localhost&quot;
user=&quot;nupik&quot;
table=&quot;ulog2_ct&quot;
pass=&quot;changeme&quot;
procedure=&quot;INSERT_OR_REPLACE_CT&quot;

[pgsql4]
db=&quot;nulog&quot;
host=&quot;localhost&quot;
user=&quot;nupik&quot;
table=&quot;nfacct&quot;
pass=&quot;changeme&quot;
procedure=&quot;INSERT_NFACCT&quot;

[dbi1]
db=&quot;ulog2&quot;
dbtype=&quot;pgsql&quot;
host=&quot;localhost&quot;
user=&quot;ulog2&quot;
table=&quot;ulog&quot;
pass=&quot;ulog2&quot;
procedure=&quot;INSERT_PACKET_FULL&quot;

[sqlite3_ct]
table=&quot;ulog_ct&quot;
db=&quot;/var/log/ulog/ulogd.sqlite3db&quot;

[sqlite3_pkt]
table=&quot;ulog_pkt&quot;
db=&quot;/var/log/ulog/ulogd.sqlite3db&quot;

[sys2]
facility=LOG_LOCAL2

[nacct1]
sync = 1

[mark1]
mark = 1

[acct1]
pollinterval = 2

[graphite1]
host=&quot;127.0.0.1&quot;
port=&quot;2003&quot;
prefix=&quot;netfilter.nfacct&quot;

[log2]
group=2
[emu2]
file=&quot;/var/log/ulog/test.log&quot;
sync=1</code></pre></div><p>and here the nftable rule -&gt;</p><div class="codebox"><pre><code>	chain chIN {
		type filter hook input priority 0; policy drop;
		icmp type echo-request counter name cntECHO log prefix &quot;echo: &quot; group 2 accept
		ct state established,related accept
		iifname lo accept		
	}</code></pre></div><p>When I remove the <span class="bbc">group 2</span> the log goes well into the default <strong>/var/log/messages</strong> .</p><p>With it, the log doesn&#039;t go into <strong>/var/log/ulog/test.log</strong> <img src="http://dev1galaxy.org/img/smilies/hmm.png" width="15" height="15" alt="hmm" /> (as specified in line 129 of ulogd.conf)</p><p>Any ideas ?</p><p>Thanks.</p>]]></description>
			<author><![CDATA[dummy@example.com (SpongeBOB)]]></author>
			<pubDate>Thu, 24 Feb 2022 07:16:13 +0000</pubDate>
			<guid>http://dev1galaxy.org/viewtopic.php?pid=34880#p34880</guid>
		</item>
	</channel>
</rss>
