ulog-acctd is an accounting daemon that get's it's data via iptables' ULOG-target and write decoded ip-header of the received packets in a definable way to a logfile. Data that may be logged: source and destination ip/port, packets, bytes, in-/out-interface, mac, ... Which category? Hmmm, I placed it in app-admin but it may also go to net-analyzer. Thomas Reproducible: Always Steps to Reproduce:
Created attachment 10552 [details] ulog-acctd-0.3.3.ebuild
Created attachment 20428 [details] ulog-acctd-0.4.1.ebuild
Created attachment 20429 [details] files/ulog-acctd-0.4.1-p.patch
It's a long time since april -- a few updates were made. The new ebuild needs a small patch to compile (at least with gcc-2.95.3).
Looks fine (still havent tried to run it)... Anyway, the ebuild does not ctreate the "/var/log/ulog-acctd" directory which is vital for the daemon to strart successfully. Of course it depends on the configuration but I thing it should work out-of-the-box... Radek
...and forgot to add, the /etc/init.d/ script would be sweet, too... :-)
an init-script would be sweet, but that would need to manipulate the firewall-rules and i think most people wouldn't like that. the log-directory "/var/log/ulog-acctd/" should be created, that's correct.
this is finally in portage, with some minor changes. no init scripts tho, if someone wants to write one, they are more than welcome to submit one :)