Re: [Nufw-users] nulog 2.1.4-1 + ulogd-pgsql 1.24-2.1

[Glen Ogilvie]

On Wednesday 20 May 2009 01:46:37 you wrote:
> with debug:
> Starting netfilter userspace log daemon: Tue May 19 17:44:47 2009 <3>
> ulogd.c:308 registering interpreter `raw'
> Tue May 19 17:44:47 2009 <3> ulogd.c:308 registering interpreter `oob'
> Tue May 19 17:44:47 2009 <3> ulogd.c:308 registering interpreter `ip'
> Tue May 19 17:44:47 2009 <3> ulogd.c:308 registering interpreter `tcp'
> Tue May 19 17:44:47 2009 <3> ulogd.c:308 registering interpreter `icmp'
> Tue May 19 17:44:47 2009 <3> ulogd.c:308 registering interpreter `udp'
> Tue May 19 17:44:47 2009 <3> ulogd.c:308 registering interpreter `ahesp'
> Tue May 19 17:44:47 2009 <3> ulogd.c:363 registering output `pgsql'
>
> gw0:/var/log/ulog# tail -f /var/log/ulog/ulogd.log
> Tue May 19 17:43:30 2009 <7> ulogd.c:812 ipulog_read == -1! ipulog_errno
> == 6, errno = 105
> Tue May 19 17:43:32 2009 <7> ulogd.c:812 ipulog_read == -1! ipulog_errno
> == 6, errno = 105
> Tue May 19 17:44:45 2009 <5> ulogd.c:594 sigterm received, exiting
> Tue May 19 17:44:47 2009 <3> ulogd.c:484 ulogd Version 1.23 starting
> Tue May 19 17:44:47 2009 <1> ulogd_PGSQL.c:237 SELECT nspname FROM
> pg_namespace n WHERE n.nspname='public'
> Tue May 19 17:44:47 2009 <1> ulogd_PGSQL.c:246 using schema public
> Tue May 19 17:44:47 2009 <1> ulogd_PGSQL.c:343 SELECT a.attname FROM
> pg_attribute a, pg_class c LEFT JOIN pg_namespace n ON
> c.relnamespace=n.oid WHERE c.relname ='ulog' AND n.nspname='public' AND
> a.attnum>0 AND a.attrelid=c.oid AND a.attisdropped=FALSE ORDER BY a.attnum
> Tue May 19 17:44:47 2009 <1> ulogd_PGSQL.c:283 allocating 4422 bytes for
> statement
> Tue May 19 17:44:47 2009 <1> ulogd_PGSQL.c:314 stmt='insert into
> public.ulog
> (ip_daddr,ip_saddr,ahesp_spi,icmp_fragmtu,icmp_gateway,icmp_echoseq,icmp_ec
>hoid,icmp_code,icmp_type,udp_len,udp_dport,udp_sport,tcp_urgp,tcp_window,tcp
>_fin,tcp_syn,tcp_rst,tcp_psh,tcp_ack,tcp_urg,tcp_ackseq,tcp_seq,tcp_dport,tc
>p_sport,ip_csum,ip_protocol,ip_ttl,ip_fragoff,ip_id,ip_totlen,ip_tos,ip_ihl,
>raw_pktlen,raw_mac,oob_out,oob_in,oob_mark,oob_time_usec,oob_time_sec,oob_pr
>efix) values ('
> Tue May 19 17:44:47 2009 <3> ulogd.c:801 initialization finished,
> entering main loop
> [[ATue May 19 17:45:38 2009 <7> ulogd.c:812 ipulog_read == -1!
> ipulog_errno == 6, errno = 105
> Tue May 19 17:45:40 2009 <7> ulogd.c:812 ipulog_read == -1! ipulog_errno
> == 6, errno = 105


If you disable the pgsql output filter, and just use the syslog output plugin, 
does the error go away?    I think this error might not be related to pgsql, 
but to some kernel settings.

See: 
http://markmail.org/message/3gt5egpublaspp4h

Can someone from INL please have a look at the thread I have found and 
Vladimir's problem?

Regards
-- 
Glen Ogilvie
Open Systems Specialists
Level 1, 162 Grafton Road
http://www.oss.co.nz/

Ph: +64 9 984 3000
Mobile: +64 21 684 146
GPG Key: ACED9C17