Re: [Iptablelog-users] Iptablelog on fc6

SourceForge Headquarters 1320 Columbia Street Suite 310 San Diego, CA 92101 +1 (858) 422-6466

You will need to modify your ulogd.conf file to save the data to your =20
mysql db.  There is an example ulogd.conf in the conf directory.

You'll need to uncomment this line in your ulogd.conf file:
plugin /usr/lib/ulogd/ulogd_MYSQL.so

You'll also need to set the mysql parameters (table/user/pass/db/host).

You're almost there.

Daniel Tarbuck

----- Message from sa...@pi... ---------
     Date: Wed, 12 Dec 2007 14:09:15 +0100
     From: Salvatore Basso <sa...@pi...>
Reply-To: Salvatore Basso <sa...@pi...>
  Subject: Re: [Iptablelog-users] Iptablelog on fc6
       To: Daniel Tarbuck <ta...@fu...>
       Cc: ipt...@li...

> Hi, in iptables I use ULOG and in:
>
> /var/log/ulogd.syslogemu
>
> I have the logs generated from iptables rules, but in iptablelog I don't
> view nothing !
> Thanks.
>
> ------
>
>    Salvatore.
>
> ----- Original Message -----
> From: "Daniel Tarbuck" <ta...@fu...>
> To: "Salvatore Basso" <sa...@pi...>
> Cc: <ipt...@li...>
> Sent: Monday, December 03, 2007 4:50 AM
> Subject: Re: [Iptablelog-users] Iptablelog on fc6
>
>
>> The latest version of the software does not use the feed_db script.  The
>> new version relies on ulogd to feed the database.
>>
>> Please note that you need to change your "LOG" rules in iptables to "ULOG=
"
>> rules.
>>
>> The database feeding is no longer handled by iptablelog.
>>
>>
>> Daniel Tarbuck
>>
>>
>> Salvatore Basso wrote:
>>> Hi, I have find fee_db and now iptablelog is started:
>>>
>>> [root@fw ~]# ps -aux|grep feed_db
>>> Warning: bad syntax, perhaps a bogus '-'? See
>>> /usr/share/doc/procps-3.2.7/FAQ
>>> root      2392  0.0  1.0  12040  4892 ?        S    22:32   0:00
>>> /usr/bin/perl /usr/bin/feed_db.pl
>>>
>>> ..but however I don't view nothing in web page ! :-(
>>> Thanks.
>>>
>>> ------
>>>
>>>   Salvatore.
>>>
>>>
>>> ----- Original Message ----- From: "Sasa" <sa...@sh...>
>>> To: "Daniel S. Tarbuck" <ta...@fu...>
>>> Cc: <ipt...@li...>
>>> Sent: Sunday, December 02, 2007 9:11 PM
>>> Subject: Re: [Iptablelog-users] Iptablelog on fc6
>>>
>>>
>>>> Hi and thanks for your support,
>>>> now with:
>>>> mysql -p {password} {database} < iptables.mysql
>>>>
>>>> I haven't the previous error but in browser I dont't view nothing in:
>>>>
>>>> http://10.0.0.139/iptablelog/
>>>>
>>>> ..view only:
>>>> Last packets filtered by tag ALL:
>>>> Records 0 to 0 of 0
>>>> TagDateHost [X] Int. [X]Proto.Src IPDest. IP [X]Dest. port
>>>> Records 0 to 0 of 0
>>>> Show Source Port
>>>>
>>>>
>>>> I have used the 0.4 version and I had the script feed_db. pl but in thi=
s
>>>> new
>>>> version there are many news, now how can I do start on boot iptablelog =
?
>>>> Pheraps I don't view nothing because iptablelog isn't started ??
>>>> Thanks.
>>>>
>>>> ------
>>>>
>>>>   Salvatore.
>>>>
>>>>
>>>> ----- Original Message ----- From: "Daniel S. Tarbuck"
>>>> <ta...@fu...>
>>>> To: "Sasa" <sa...@sh...>
>>>> Cc: <ipt...@li...>
>>>> Sent: Friday, November 30, 2007 6:59 PM
>>>> Subject: Re: [Iptablelog-users] Iptablelog on fc6
>>>>
>>>>
>>>>
>>>>
>>>> You can create the database tables with the iptables.mysql script in
>>>> the conf directory.  Something like:
>>>>
>>>> mysql -p {password} {database} < iptables.mysql
>>>>
>>>> Should help fix the problem.
>>>>
>>>>
>>>> Daniel Tarbuck
>>>>
>>>>
>>>> ----- Message from sa...@sh... ---------
>>>>     Date: Fri, 30 Nov 2007 11:31:48 +0100
>>>>     From: Sasa <sa...@sh...>
>>>> Reply-To: Sasa <sa...@sh...>
>>>>  Subject: [Iptablelog-users] Iptablelog on fc6
>>>>       To: ipt...@li...
>>>>
>>>>
>>>>> Hi, I have installed 0.9 on Fedora Core 6 with:
>>>>>
>>>>> mysql-server-5.0.27-1.fc6
>>>>> ulogd-1.24.2.fc6
>>>>> httpd-2.2.6-1.fc6
>>>>>
>>>>> ..but I have the following error:
>>>>>
>>>>> Can't execute query
>>>>> SELECT COUNT(id) FROM ulog u WHERE 1=3D1
>>>>> MySQL Error: Table 'iptables.ulog' doesn't exist
>>>>> This script cannot continue, terminating.
>>>>>
>>>>> ..but I haven't db.sql, how can I do fill database iptables ?
>>>>> Thanks.
>>>>>
>>>>> ------
>>>>>
>>>>>    Salvatore.
>>>>>
>>>>>
>>>>> ----------------------------------------------------------------------=
---
>>>>>
>>>>> SF.Net email is sponsored by: The Future of Linux Business White Paper
>>>>> from Novell.  From the desktop to the data center, Linux is going
>>>>> mainstream.  Let it simplify your IT future.
>>>>> http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4
>>>>> _______________________________________________
>>>>> Iptablelog-users mailing list
>>>>> Ipt...@li...
>>>>> https://lists.sourceforge.net/lists/listinfo/iptablelog-users
>>>>>
>>>>
>>>>
>>>> ----- End message from sa...@sh... -----
>>>>
>>>>
>>>>
>>>> --
>>>>
>>>> Daniel Tarbuck <ta...@fu...>
>>>> FutureWest Computer Services
>>>> x.509: https://www.futurewest.ca/ca.crt
>>>> Web: http://www.futurewest.ca
>>>>
>>>>
>>>> -----------------------------------------------------------------------=
--
>>>> SF.Net email is sponsored by: The Future of Linux Business White Paper
>>>> from Novell.  From the desktop to the data center, Linux is going
>>>> mainstream.  Let it simplify your IT future.
>>>> http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4
>>>> _______________________________________________
>>>> Iptablelog-users mailing list
>>>> Ipt...@li...
>>>> https://lists.sourceforge.net/lists/listinfo/iptablelog-users
>>>>
>>>
>>
>
>
> -------------------------------------------------------------------------
> SF.Net email is sponsored by:
> Check out the new SourceForge.net Marketplace.
> It's the best place to buy or sell services for
> just about anything Open Source.
> http://sourceforge.net/services/buy/index.php
> _______________________________________________
> Iptablelog-users mailing list
> Ipt...@li...
> https://lists.sourceforge.net/lists/listinfo/iptablelog-users
>

----- End message from sa...@pi... -----

--=20

Daniel Tarbuck <ta...@fu...>
FutureWest Computer Services
x.509: https://www.futurewest.ca/ca.crt
Web: http://www.futurewest.ca