[Pkg-ulog-acctd-general] submit patches

Amin Azez azez at ufomechanic.net
Wed Oct 19 13:07:21 UTC 2005


Amin Azez wrote:

>
>I'm also about to submit more patches which log the physical device
>packets traverse on, useful when %i and %o are a bridge and it would be
>nice to know what the real interfaces were.
>  
>

This gets complicated.
The kernel modules ebt_ulog and ipt_ULOG (only one can be loaded at a
time) send different ulog structures to user space; and ulog_acctd seems
to be hard-wired for the current ipt_ULOG struct.

This kernel patch (suitable for 2.6.11 aged kernels) cause upt_ULOG to
try and log the physical device where available.

Really the structsebt_ulog_packet_msg and ulog_packet_msg need merging
so that ulog-acctd doesn't care where it got it's notification from.

Sam
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ulog.physdev2.patch
Type: text/x-patch
Size: 1017 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-ulog-acctd-general/attachments/20051019/1978ed93/ulog.physdev2.bin


More information about the Pkg-ulog-acctd-general mailing list