Ubuntu-fr

GhislainAUTRET

ULOGD2 NFLOG et ses modules

Bonjour,
J'utilise ulogd2 pour logger certaines connections avec iptables.
Sur une machine, je n'arrive pas à utiliser les target ULOG ou NFLOG.
Je pense que ça vient du fait que je n'ai pas les bons modules mais je ne parviens pas  savoir les quels me manquent.

voici la sortie de lsmod:

Module                  Size  Used by
nf_conntrack_ipv4      20939  0
nf_defrag_ipv4         12618  1 nf_conntrack_ipv4
xt_tcpudp              12635  0
xt_conntrack           12843  0
nf_conntrack           91462  2 xt_conntrack,nf_conntrack_ipv4
nfnetlink_log          18525  1
nfnetlink              13904  2 nfnetlink_log
ip6table_filter        12729  0
ip6_tables             22965  1 ip6table_filter
iptable_filter         12725  0
ip_tables              22951  1 iptable_filter
x_tables               26516  6 ip6table_filter,ip_tables,xt_tcpudp,xt_conntrack,iptable_filter,ip6_tables
autofs4                34545  2

ulogd2 se lance sans problèmes, voici la configuration:

[global]
logfile="/var/log/ulog.log"

# loglevel: debug(1), info(3), notice(5), error(7) or fatal(8) (default 5)
loglevel=1

plugin="/usr/lib/aarch64-linux-gnu/ulogd/ulogd_inppkt_NFLOG.so"
plugin="/usr/lib/aarch64-linux-gnu/ulogd/ulogd_inppkt_ULOG.so"
plugin="/usr/lib/aarch64-linux-gnu/ulogd/ulogd_inpflow_NFCT.so"
plugin="/usr/lib/aarch64-linux-gnu/ulogd/ulogd_filter_IFINDEX.so"
plugin="/usr/lib/aarch64-linux-gnu/ulogd/ulogd_filter_IP2STR.so"
plugin="/usr/lib/aarch64-linux-gnu/ulogd/ulogd_filter_IP2BIN.so"
plugin="/usr/lib/aarch64-linux-gnu/ulogd/ulogd_filter_PRINTPKT.so"
plugin="/usr/lib/aarch64-linux-gnu/ulogd/ulogd_filter_HWHDR.so"
plugin="/usr/lib/aarch64-linux-gnu/ulogd/ulogd_filter_PRINTFLOW.so"
plugin="/usr/lib/aarch64-linux-gnu/ulogd/ulogd_output_LOGEMU.so"
plugin="/usr/lib/aarch64-linux-gnu/ulogd/ulogd_output_SYSLOG.so"
plugin="/usr/lib/aarch64-linux-gnu/ulogd/ulogd_output_XML.so"
plugin="/usr/lib/aarch64-linux-gnu/ulogd/ulogd_output_GPRINT.so"
plugin="/usr/lib/aarch64-linux-gnu/ulogd/ulogd_raw2packet_BASE.so"
plugin="/usr/lib/aarch64-linux-gnu/ulogd/ulogd_inpflow_NFACCT.so"
plugin="/usr/lib/aarch64-linux-gnu/ulogd/ulogd_output_GRAPHITE.so"

# this is a stack for logging packet send by system via LOGEMU
stack=log1:NFLOG,base1:BASE,ifi1:IFINDEX,ip2str1:IP2STR,print1:PRINTPKT,emu1:LOGEMU

[log1]
# netlink multicast group (the same as the iptables --nflog-group param)
# Group O is used by the kernel to log connection tracking invalid message
group=1

[emu1]
file="/var/log/ulog/syslogemu.log"
sync=1

et voici la sortie qd je tente de logger des connections:

~
~# iptables -A FORWARD -p tcp --dport 80 -m state --state NEW -j NFLOG --nflog-group 1
iptables: No chain/target/match by that name.

ce qui signifie que mon iptables ne sait pas  quoi correspond la target NFLOG (idem pour ULOG ou pour LOG)
quelqun saurait-il me dire quel module il me manque?