Henrik Nordstrom | c279413 | 2004-01-22 15:04:24 +0000 | [diff] [blame] | 1 | This target provides userspace logging of matching packets. When this |
| 2 | target is set for a rule, the Linux kernel will multicast this packet |
| 3 | through a |
| 4 | .IR netlink |
| 5 | socket. One or more userspace processes may then subscribe to various |
| 6 | multicast groups and receive the packets. |
| 7 | Like LOG, this is a "non-terminating target", i.e. rule traversal |
| 8 | continues at the next rule. |
| 9 | .TP |
| 10 | .BI "--ulog-nlgroup " "nlgroup" |
| 11 | This specifies the netlink group (1-32) to which the packet is sent. |
| 12 | Default value is 1. |
| 13 | .TP |
| 14 | .BI "--ulog-prefix " "prefix" |
| 15 | Prefix log messages with the specified prefix; up to 32 characters |
| 16 | long, and useful for distinguishing messages in the logs. |
| 17 | .TP |
| 18 | .BI "--ulog-cprange " "size" |
| 19 | Number of bytes to be copied to userspace. A value of 0 always copies |
| 20 | the entire packet, regardless of its size. Default is 0. |
| 21 | .TP |
| 22 | .BI "--ulog-qthreshold " "size" |
| 23 | Number of packet to queue inside kernel. Setting this value to, e.g. 10 |
| 24 | accumulates ten packets inside the kernel and transmits them as one |
| 25 | netlink multipart message to userspace. Default is 1 (for backwards |
| 26 | compatibility). |
| 27 | .br |