[pve-devel] pve-firewall : log conntrack sessions ?

[Alexandre DERUMIER]

>>Will look into it.

Thanks !

----- Mail original -----
De: "David Limbeck" <d.limbeck at proxmox.com>
À: "pve-devel" <pve-devel at pve.proxmox.com>
Envoyé: Mercredi 21 Novembre 2018 11:14:17
Objet: Re: [pve-devel] pve-firewall : log conntrack sessions ?

Will look into it. 

On 11/21/18 7:50 AM, Alexandre DERUMIER wrote: 
> Hi, 
> 
> I'm currently to finally use proxmox firewall in production next year, 
> 
> and I missing piece is session logging (create in conntrack, end in conntrack). 
> 
> It's currently possible with ulogd2, but ulogd2 don't start with pve fw logger is running. 
> 
> 
> I have found a blog about it: 
> 
> https://home.regit.org/2014/02/logging-connection-tracking-event-with-ulogd/ 
> 
> 
> It's need to enable : 
> 
> echo "1"> /proc/sys/net/netfilter/nf_conntrack_acct 
> echo "1"> /proc/sys/net/netfilter/nf_conntrack_timestamp 
> 
> then ulogd2 listen for 2 netlink events: 
> 
> NF_NETLINK_CONNTRACK_NEW: 0x00000001 
> NF_NETLINK_CONNTRACK_DESTROY: 0x00000004 
> 
> https://git.netfilter.org/ulogd2/tree/input/flow/ulogd_inpflow_NFCT.c 
> 
> 
> I'm pretty poor in C , don't known if it's difficult to port this ulogd code in pve fw logger ? 
> 
> _______________________________________________ 
> pve-devel mailing list 
> pve-devel at pve.proxmox.com 
> https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel 

_______________________________________________ 
pve-devel mailing list 
pve-devel at pve.proxmox.com 
https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel