ulogd

ulogd is an open source software that replaces the standard syslog-based logging in iptables based firewalls by using the LOG target.

ulogd has support for plugins, for various output formats, and for new protocols.

What is new in this release:

• This version features two major improvements in the database output.
• The first is a backlog system to avoid event loss in case of database downtime, and the second is a running mode in which acquisition is made in one thread and queries to databases are made in separate threads to reduce latency in the treatment of kernel messages.

What is new in version 2.0.3:

• This version features two major improvements in the database output.
• The first is a backlog system to avoid event loss in case of database downtime, and the second is a running mode in which acquisition is made in one thread and queries to databases are made in separate threads to reduce latency in the treatment of kernel messages.

What is new in version 2.0.2:

• This version adds a GRAPHITE output plugin to ulogd, and src/dst and protocol filters to the nfct plugin.

What is new in version 2.0.1:

• This version includes support for the nfacct extended iptables accounting infrastructure.

What is new in version 2.0.0:

• New modules were added: the GPRINT and XML output plugins, the nfacct and UNIXSOCK input plugins, and the IP2BIN, IP2HBIN filter plugins.
• The NFCT plugin has gained support for polling.
• Stored MySQL procedures are now supported as well.

What is new in version 2.0.0 Beta 3:

• Minor bugfixes

Requirements:

• iptables