Henrik Nordstrom | c279413 | 2004-01-22 15:04:24 +0000 | [diff] [blame] | 1 | This target provides userspace logging of matching packets. When this |
| 2 | target is set for a rule, the Linux kernel will multicast this packet |
| 3 | through a |
| 4 | .IR netlink |
| 5 | socket. One or more userspace processes may then subscribe to various |
| 6 | multicast groups and receive the packets. |
| 7 | Like LOG, this is a "non-terminating target", i.e. rule traversal |
| 8 | continues at the next rule. |
| 9 | .TP |
Jan Engelhardt | fea74bf | 2009-01-12 04:53:18 +0100 | [diff] [blame] | 10 | \fB\-\-ulog\-nlgroup\fP \fInlgroup\fP |
Henrik Nordstrom | c279413 | 2004-01-22 15:04:24 +0000 | [diff] [blame] | 11 | This specifies the netlink group (1-32) to which the packet is sent. |
| 12 | Default value is 1. |
| 13 | .TP |
Jan Engelhardt | fea74bf | 2009-01-12 04:53:18 +0100 | [diff] [blame] | 14 | \fB\-\-ulog\-prefix\fP \fIprefix\fP |
Henrik Nordstrom | c279413 | 2004-01-22 15:04:24 +0000 | [diff] [blame] | 15 | Prefix log messages with the specified prefix; up to 32 characters |
| 16 | long, and useful for distinguishing messages in the logs. |
| 17 | .TP |
Jan Engelhardt | fea74bf | 2009-01-12 04:53:18 +0100 | [diff] [blame] | 18 | \fB\-\-ulog\-cprange\fP \fIsize\fP |
Henrik Nordstrom | c279413 | 2004-01-22 15:04:24 +0000 | [diff] [blame] | 19 | Number of bytes to be copied to userspace. A value of 0 always copies |
| 20 | the entire packet, regardless of its size. Default is 0. |
| 21 | .TP |
Jan Engelhardt | fea74bf | 2009-01-12 04:53:18 +0100 | [diff] [blame] | 22 | \fB\-\-ulog\-qthreshold\fP \fIsize\fP |
Henrik Nordstrom | c279413 | 2004-01-22 15:04:24 +0000 | [diff] [blame] | 23 | Number of packet to queue inside kernel. Setting this value to, e.g. 10 |
| 24 | accumulates ten packets inside the kernel and transmits them as one |
| 25 | netlink multipart message to userspace. Default is 1 (for backwards |
| 26 | compatibility). |
| 27 | .br |