# Example configuration for ulogd # $Id: ulogd.conf.in 5267 2005-02-19 21:33:43Z laforge $ # [global] ###################################################################### # GLOBAL OPTIONS ###################################################################### # netlink multicast group (the same as the iptables --ulog-nlgroup param) nlgroup=1 # logfile for status messages logfile="/var/log/ulogd.log" # loglevel: debug(1), info(3), notice(5), error(7) or fatal(8) loglevel=5 # socket receive buffer size (should be at least the size of the # in-kernel buffer (ipt_ULOG.o 'nlbufsiz' parameter) rmem=131071 # libipulog/ulogd receive buffer size, should be > rmem bufsize=150000 ###################################################################### # PLUGIN OPTIONS ###################################################################### # We have to configure and load all the plugins we want to use # general rules: # 1. load the plugins _first_ from the global section # 2. options for each plugin in seperate section below # # ulogd_BASE.so - interpreter plugin for basic IPv4 header fields # you will always need this plugin="@libdir@/ulogd_BASE.so" # load the plugin (remove the '#'if you want to enable it #plugin="@libdir@/ulogd_NETFLOW.so" # output plugins. #plugin="@libdir@/ulogd_LOGEMU.so" #plugin="@libdir@/ulogd_OPRINT.so" #plugin="@libdir@/ulogd_MYSQL.so" #plugin="@libdir@/ulogd_PGSQL.so" #plugin="@libdir@/ulogd_SQLITE3.so" #plugin="@libdir@/ulogd_PCAP.so" plugin="@libdir@/ulogd_DRL.so" [DRL] # nodelimit is the administrative limit for the node # It will never go above this rate, even if capacity is # available. A value of 0 means unlimited. nodelimit=0 # DRL allocation policy: FPS for flow proportional share # or GRD for global random drop. policy=FPS # estintms is the system tick time (estimate interval), # in milliseconds. estintms=500 # The location of the DRL logfile. drl_logfile="/var/log/ulogd-drl.log" # The verbosity of the DRL logfile. 1 = most verbose/debug, # 2 = traffic information and errors, 3 = errors only. drl_loglevel=2 # The location of the DRL configuration file, which # specifies which identities should be installed. drl_configfile="@etcdir@/drl.xml" # Whether or not ulogd should create the htb hierarchy (for FPS). # 0 = Use the hierarchy that's already there. (When, for instance, # PlanetLab's node manager is responsible for it.) # 1 = Re-build the hierarchy # When this is set to 0, identities must specify an htb_node and # htb_parent property in the drl xml file. create_htb=0 # Used to optionally specify which IP address DRL's communication # socket should attempt to bind to. bind_addr="AUTO" [NETFLOW] # PlanetLab NetFlow logging # dump interval in minutes interval=5 # CSV dump csv="/var/www/html/flows.csv" # database information #mysqlpass changeme #mysqluser="netflow" #mysqldb="netflow" #mysqlhost localhost # slice map slicemap="/etc/passwd" [LOGEMU] file="/var/log/ulogd/ulogd.syslogemu" sync=1 [OPRINT] file="/var/log/ulogd/ulogd.pktlog" [MYSQL] table="ulog" pass="changeme" user="laforge" db="ulogd" host="localhost" [PGSQL] table="ulog" schema="public" pass="changeme" user="postgres" db="ulogd" host="localhost" [SQLITE3] table="ulog" db="/path/to/sqlite/db" buffer=200 [PCAP] file="/var/log/ulogd/ulogd.pcap" sync=1