[ulogd] ulogd not logging anything -- solved

Michael Fowler michael@shoebox.net
Wed, 2 Oct 2002 12:40:47 -0800


Robert Lynch pointed me to a thread in February 2002 that answered my
question.  The thread is here:

    http://lists.gnumonks.org/pipermail/ulogd/2002-February/000047.html 

Essentially, the ulogd for Debian woody is broken when used in conjunction
with a recent kernel (2.4.18 and above).  The problem is the NETLINK_NFLOG
constant was changed from 4 to 5 to integrate into the kernel, but the ulogd
binary installed with Debian woody is using the old constant.

The fix is to install from source, i.e. apt-get source ulogd, compile,
install.  One note for anyone doing this: the ulogd source package contains
its own copy of the include files in /usr/include/linux, you will likely
need to replace those with a more recent version.  The problem may also be
fixed in the more recent version of ulogd in Debian unstable.

At the end of the original thread, the poster, Robert Collier, mentioned he
would file a bug report with Debian.  That bug report is here:

    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=132675&archive=yes&repeatmerged=yes


Thank you to the individuals that gave me advice, and thanks especially to
Robert Lynch for solving the problem.


Michael
--
Administrator                      www.shoebox.net
Programmer, System Administrator   www.gallanttech.com
--