ULOGD(8) System Manager's Manual ULOGD(8)

ulogd - netfilter/iptables logging daemon

ulogd [options]

ulogd is a logging daemon that reads event messages coming from the Netfilter connection tracking, the Netfilter packet logging subsystem and from the Netfilter accounting subsystem. You have to enable support for connection tracking event delivery; ctnetlink and the NFLOG target in your Linux kernel 2.6.x or load their respective modules. The deprecated ULOG target (which has been superseded by NFLOG) is also supported.

The received messages can be logged into files or into a mySQL, sqlite3 or PostgreSQL database. IPFIX and Graphite output are also supported.

fork ulogd into background (start as daemon)
use <filename> as configuration file instead of /etc/ulogd.conf
show usage information
show version information and copyright
verbose output on stdout when not running as daemon
set log level to <level>: debug(1), info(3), notice(5), error(7) or fatal(8) (default 5)
change UID/GID
display infos about plugin
record the ulogd process ID to the given file name


There is more documentation about the daemon and the database plugins (including examples) in the directories


/usr/share/doc/ulogd-mysql and


This manual page was written by Joerg Wendland <joergland@debian.org>, for the Debian GNU/Linux system (but may be used by others).

February 20, 2013 Linux Netfilter