ULOGD(8)

📦
version 2.0.9 · 5 versions
, in alpine 3.22, alpine 3.23, alpine 3.24, arch rolling

💜 ULOGD(8) — the netfilter/iptables logging daemon, bestie edition

okay so picture this: ulogd is out here being the manual page for the netfilter/iptables logging daemon, and honestly? she's kind of a big deal. let's get into it 🌸

ulogd [options]

✨ NAME ✨

ulogd — netfilter/iptables logging daemon. that's her. that's the whole vibe. 👑

🦋 SYNOPSIS 🦋

ulogd [options]

🌸 DESCRIPTION 🌸

okay so first things first: ulogd is a logging daemon. she reads event messages that come from the Netfilter connection tracking, from the Netfilter packet logging subsystem, and from the Netfilter accounting subsystem. she's like the group chat admin of your kernel events, no cap. 💅

but like — you gotta do your part. you have to enable support for connection tracking event delivery; that means ctnetlink and the NFLOG target in your Linux kernel 2.6.x, or you load their respective modules. the way that's non-negotiable 😭

⚠️ heads up bestie: the deprecated ULOG target (which has been superseded by NFLOG) is no longer supported. she's retired. gone. not coming to the function. 💀

and then!! the received messages can be logged into files or into a mySQL, sqlite3 or PostgreSQL database. IPFIX and Graphite output are also supported. versatile queen 🎀✨

💅 OPTIONS 💅

  • -d, --daemon — fork ulogd into the background (start as daemon). she's leaving the group chat to go be mysterious 🧚
  • -c <filename>, --configfile <filename> — use <filename> as configuration file instead of /etc/ulogd.conf. custom config, main character energy ✨
  • -h, --help — show usage information. when you're lost, she'll help a girl out 🫶
  • -V, --version — show version information and copyright 📜
  • -v, --verbose — verbose output on stdout when not running as daemon. she's a talker 🗣️
  • -l, --loglevel <level> — set log level to <level>: debug(1), info(3), notice(5), error(7) or fatal(8) (default 5). numbers matter, bestie 🔥
  • -u <UID>, --uid <UID> — change UID/GID 🔁
  • -i <pluginpath>, --info <pluginpath> — display infos about plugin. give her the tea about a plugin ☕
  • -p <filename>, --pidfile <filename> — record the ulogd process ID to the given file name 📝

🍓 FILES 🍓

  • /etc/ulogd.conf
  • /var/log/ulogd.log

🎀 SEE ALSO 🎀

there is more documentation about the daemon and the database plugins (including examples!) in the directories:

  • /usr/share/doc/ulogd
  • /usr/share/doc/ulogd-mysql
  • /usr/share/doc/ulogd-pgsql

go read it, iykyk 📚💖

🌈 AUTHOR 🌈

this manual page was written by Joerg Wendland <joergland@debian.org>, for the Debian GNU/Linux system (but may be used by others). shoutout Joerg, iconic behavior honestly 👑🫶

and that's the whole page, bestie!! 🌟 this was brought to you by Linux Netfilter, dated February 20, 2013, and filed under ULOGD(8) — mwah, go log some packets 💋💜

📦 where this page comes from