plugin needed for ulogd

[synux]

Hi. I am new of Sabayon.

I'd like to use ulogd working together with MySQL.
I installed ulogd-2.0.0_beta4 and created the database, but when try to start ulogd I get error because of a lost plugin.

This is what I can see in the ulogd.log :

Code: Select all

ulogd.c:599 load_plugin: /usr/lib/ulogd/ulogd_output_MYSQL.so: cannot open shared object file: No such file or directory


How can I get the ulogd_output_MYSQL.so plugin ?

[wolfden]

looks like you need to file a bug on our bugzilla

[synux]

looks like you need to file a bug on our bugzilla

maybe there should be some ulogd-mysql packet in the repository!

[Stupot]

That is what http://packages.sabayon.org/show/ulogd, ... 5,standard is.

If you'll note, it was built with the mysql use flag.

USE Flags
doc
Global: Adds extra documentation (API, Javadoc, etc). It is recommended to enable per package instead of globally
mysql
Global: Adds mySQL Database support
Local: Build MYSQL output plugin to save packets in a mysql database.
postgres
Global: Adds support for the postgresql database
Local: Build PGSQL output plugin to save packets in a postgres database.
pcap
Global: Add support for network packet capture via net-libs/libpcap
Local: Build PCAP output plugin to save packets in PCAP format. Uses the net-libs/libpcap library
sqlite
Global: Adds support for sqlite - embedded sql database
Local: Build SQLITE3 output plugin to save packets in an sqlite database.

It looks like it is being maintained properly, but perhaps there is a bug in the code or in the ebuild.

[synux]

...
It looks like it is being maintained properly, but perhaps there is a bug in the code or in the ebuild.

OK. Thanks for your explanation! Now I know something more.
So I should file a bug as wolfden suggested! But... how to do it? I never did it.

[Stupot]

https://bugs.sabayon.org/

Look for "Enter a new bug request"

Give as much detail as you can. Any error logs you've got from mysql would be helpful.

[synux]

Bug 3228 opened. I hope it is well opened!
It is in UNCONFIRMED status. It isn't my job to change the status, right?

Thanks!

[Stupot]

Nope, just keep your eye on it.

If the bug is closed as invalid because there aren't enough logs/ right kind of logs, then chime in and offer to collect some logs.

Other than that, your part should be done.

[synux]

Bug 3228 opened. I hope it is well opened!
It is in UNCONFIRMED status. It isn't my job to change the status, right?

Thanks!

After 10 days, the bug is still in UNCONFIRMED status. No one takes care of this bug and I can't use ulogd with mysql yet.

[synux]

Bug 3228 has been solved, now I have the mysql plugin, but still I can't start ulogd.

My ulogd plugins configuration:

Code: Select all

plugin="/usr/lib/ulogd/ulogd_inppkt_ULOG.so"
plugin="/usr/lib/ulogd/ulogd_filter_IFINDEX.so"
plugin="/usr/lib/ulogd/ulogd_filter_IP2BIN.so"
plugin="/usr/lib/ulogd/ulogd_filter_HWHDR.so"
plugin="/usr/lib/ulogd/ulogd_output_MYSQL.so"
plugin="/usr/lib/ulogd/ulogd_raw2packet_BASE.so"

stack=ulog1:ULOG,base1:BASE,ifi1:IFINDEX,ip2bin1:IP2BIN,mac2str1:HWHDR,mysql1:MYSQL

[ulog1]
nlgroup=1

[mysql1]
db="ulogd"
host="localhost"
user="xxxx"
table="ulog"
pass="xxxxxxxx"
procedure="INSERT_PACKET_FULL"


in ulogd.log:

Code: Select all

Fri Jun  8 13:31:06 2012 <5> ulogd.c:372 registering plugin `ULOG'
Fri Jun  8 13:31:06 2012 <5> ulogd.c:372 registering plugin `IFINDEX'
Fri Jun  8 13:31:06 2012 <5> ulogd.c:372 registering plugin `IP2BIN'
Fri Jun  8 13:31:06 2012 <5> ulogd.c:372 registering plugin `HWHDR'
Fri Jun  8 13:31:06 2012 <5> ulogd.c:372 registering plugin `MYSQL'
Fri Jun  8 13:31:06 2012 <5> ulogd.c:372 registering plugin `BASE'
Fri Jun  8 13:31:06 2012 <1> ulogd.c:811 building new pluginstance stack (ulog1:ULOG,base1:BASE,ifi1:IFINDEX,ip2bin1:IP2BIN,mac2str1:HWHDR,mysql1:MYSQL):
Fri Jun  8 13:31:06 2012 <1> ulogd.c:820 tok=`ulog1:ULOG'
Fri Jun  8 13:31:06 2012 <1> ulogd.c:856 pushing `ULOG' on stack
Fri Jun  8 13:31:06 2012 <1> ulogd.c:820 tok=`base1:BASE'
Fri Jun  8 13:31:06 2012 <1> ulogd.c:856 pushing `BASE' on stack
Fri Jun  8 13:31:06 2012 <1> ulogd.c:820 tok=`ifi1:IFINDEX'
Fri Jun  8 13:31:06 2012 <1> ulogd.c:856 pushing `IFINDEX' on stack
Fri Jun  8 13:31:06 2012 <1> ulogd.c:820 tok=`ip2bin1:IP2BIN'
Fri Jun  8 13:31:06 2012 <1> ulogd.c:856 pushing `IP2BIN' on stack
Fri Jun  8 13:31:06 2012 <1> ulogd.c:820 tok=`mac2str1:HWHDR'
Fri Jun  8 13:31:06 2012 <1> ulogd.c:856 pushing `HWHDR' on stack
Fri Jun  8 13:31:06 2012 <1> ulogd.c:820 tok=`mysql1:MYSQL'
Fri Jun  8 13:31:06 2012 <1> ulogd.c:856 pushing `MYSQL' on stack
Fri Jun  8 13:31:06 2012 <1> ulogd.c:646 traversing plugin `MYSQL'
Fri Jun  8 13:31:06 2012 <5> ../../util/db.c:144 (re)configuring
Fri Jun  8 13:31:06 2012 <1> ulogd_output_MYSQL.c:131 42 fields in table
Fri Jun  8 13:31:06 2012 <1> ulogd.c:646 traversing plugin `HWHDR'
Fri Jun  8 13:31:06 2012 <1> ulogd.c:646 traversing plugin `IP2BIN'
Fri Jun  8 13:31:06 2012 <1> ulogd.c:646 traversing plugin `IFINDEX'
Fri Jun  8 13:31:06 2012 <1> ulogd.c:646 traversing plugin `BASE'
Fri Jun  8 13:31:06 2012 <1> ulogd.c:646 traversing plugin `ULOG'
Fri Jun  8 13:31:06 2012 <1> ulogd.c:662 connecting input/output keys of stack:
Fri Jun  8 13:31:06 2012 <1> ulogd.c:670 traversing plugin `MYSQL'
...
...
Fri Jun  8 13:31:06 2012 <7> ulogd.c:727 cannot find key `pwsniff.user' in stack
Fri Jun  8 13:31:06 2012 <1> ulogd.c:863 destroying stack
Fri Jun  8 13:31:06 2012 <8> ulogd.c:1179 not even a single working plugin stack


May I have some help?!