Red Hat Bugzilla – Bug 172766
RFE: linux FW/netfilter
Last modified: 2014-03-16 22:56:43 EDT
They're the counterparts to the first pieces of the "next generation" netfilter
subsystem that will be present in the 2.6.14 linux kernel release.
This is the low-level communications library
This is the userspace library for nfnetlink_log in 2.6.14
It is used by the upcoming ulogd-2.00beta release
This is the userspace library for nfnetlink_queue in 2.6.14
It is used by applications that traditionally used libipq
NuFW already has a working port
This is the userspace library for the ip_conntrack netlink interface
It is currently only used by the conntrack program (see below)
The userspace connection tracking table administration program
ulogd is a replacement for traditional syslog-based logging (using the LOG
target) in iptables-based firewalls. ULOG/ulogd has a different concept. Packets
get copied to a special logging daemon, which can do very detailed logging to
different targets (plaintext files, MySQL databases, ...). ulogd supports
plugins for different output formats, as well as for new protocols/..
ulogd is already in Fedora Extras; that seems like a good place for these
libraries to start out as well.