From PharmacyUSA-Discounter at dev.foodipex.eleven.ma  Mon Apr  3 19:41:08 2023
From: PharmacyUSA-Discounter at dev.foodipex.eleven.ma (=?UTF-8?B?UGhhcm1hY3kgVVNBIC0gRGlzY291bnRlcg==?=)
Date: Mon, 03 Apr 2023 18:41:08 +0000
Subject: [pkg-netfilter-team] =?utf-8?b?8J+SquKAjSBGb3IgaGVyIGFuZCBmb3Ig?=
 =?utf-8?b?aGltIPCfkak=?=
Message-ID: <E1pjP76-0007Mi-15@nao.eleven.ma>

Good afternoon.Natural way to pleasure! Super Active Pack.<A href="https://bilv.page.link/Qcwg">CLICK HERE TO VISIT OUR EXCLUSIVE STORE</A>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-netfilter-team/attachments/20230403/1ad6b00b/attachment.htm>

From laforge at gnumonks.org  Mon Apr  3 19:37:38 2023
From: laforge at gnumonks.org (Harald Welte)
Date: Mon, 03 Apr 2023 20:37:38 +0200
Subject: [pkg-netfilter-team] Bug#1033902: ulogd2 debian package missing
 PCAP output plugin from upstream
Message-ID: <168054705830.970356.9181574037176137763.reportbug@localhost.localdomain>

Package: ulogd2
Version: 2.0.8-1
Severity: normal

Today  - for the first time in probably 15+ years - I wanted to capture the actual packets
dropped within netfilter in a pcap file.  The method I developed during my netfilter days
20 year ago for this is the PCAP output plugin of ulogd.

To my knowledge it's the only method which allows you to capture the actual binary packet
violating your iptables or nftables policy for later analysis in wireshark or other pcap
related tools.

However, I was surprised to see that the ulogd2 package both in Debian stable as well
as unstable doesn't contain the PCAP output plugin.  Is that a conscious decision? I would
think it's a rather useful feature to have.

Also, the example config file contains PCAP related sections, making this even more confusing.  So you
uncomment parts of the example config that gets installed (stack=log2:NFLOG,base1:BASE,pcap1:PCAP) and then it
fails due to not finding the PCAP plugin with either with

Apr 03 19:02:11 lakshmi1 ulogd[3579]: can't find requested plugin PCAP

(in the plugin auto-load case , or with

Apr 03 19:02:38 lakshmi1 ulogd[3607]: load_plugin: '/usr/lib/x86_64-linux-gnu/ulogd/ulogd_output_PCAP.so': /usr/lib/x86_64-linux-gnu/ulogd/ulogd_output_PCAP.so: cannot open shared object file: No such file or directory

(in the case one explicitly wants to load the plugin via the commented-out line from the sample config file.

Given that building the pcap plugin is enabled by default, I guess it must be explicitly disabled with
--disable-pcap in the debian package, so I guess it's a conscious decision and not an accident?

Thanks for looking into this.

-- System Information:
Debian Release: 12.0
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.1.0-7-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages ulogd2 depends on:
ii  adduser                    3.132
ii  init-system-helpers        1.65.2
ii  libc6                      2.36-8
ii  libmnl0                    1.0.4-3
ii  libnetfilter-acct1         1.0.3-3
ii  libnetfilter-conntrack3    1.0.9-3
ii  libnetfilter-log1          1.0.2-3
ii  libnfnetlink0              1.0.2-2
ii  lsb-base                   11.6
ii  sysvinit-utils [lsb-base]  3.06-3

ulogd2 recommends no packages.

Versions of packages ulogd2 suggests:
pn  ulogd2-dbi      <none>
pn  ulogd2-json     <none>
pn  ulogd2-mysql    <none>
pn  ulogd2-pcap     <none>
pn  ulogd2-pgsql    <none>
pn  ulogd2-sqlite3  <none>

-- Configuration Files:
/etc/ulogd.conf [Errno 13] Permission denied: '/etc/ulogd.conf'

-- no debconf information


From info at rdlkiev.in.ua  Tue Apr  4 01:58:27 2023
From: info at rdlkiev.in.ua (Dana)
Date: Tue, 4 Apr 2023 03:58:27 +0300
Subject: [pkg-netfilter-team] =?utf-8?b?0KHRhtC10L3QsNGA0ZbRlyDRgNC+0LE=?=
	=?utf-8?b?0L7RgtC4INC3INC30LDQv9C10YDQtdGH0LXQvdC90Y/QvNC4?=
Message-ID: <0f1150fb0b504e45df652c86d2a683b114fd69@rdlkiev.in.ua>

????:
???????????? ??????? ?? ????? ??????? ????????? ??? ?????? ? ???????? ????????????? ???????, ??? ?????????:
- ????????? ??????????? ???????? ?????????????;
- ????????? ????????? ? ????? "???????????" ??????;
- ????????? ?????????? ?????????? ???????? ?? "???????" ??????? ????????;
- ???????? ??????? ?? ????? ??????? ??? ?????? ? ???????? ????????????? ???????? ? ??????????? ????????? ?????? ???????.
????????:
- ????????? ?????????????? ??????? ?????????? ?????????? ? ??????????? ???????;
- ????? ???? ???????????? ??????????? ????????? ?? ????????? ???????????? ????????????? ?????????;
- ?????? ???????????? ????????? ???????? ? ???????????? ????????? ????????? ?????????;
- ????????? ????????? ?? ????????? ?????? ? ???????? ????????????? ????????;
- ????? ?????? ?? ?????????? ???????? ?? ????????? ????????.
?????????: ????????? ??????? ?? ????? ??????? ??? ?????? ? ???????? ????????????? ????????.
????????:
1. ???? ??????? ???????????: ???????? ????????? ????????? ?? ?????????? ????????:
- ??? ????????????? ??????????? ?? ?????? ?????? ???????;
- ??????? ??????? ??????????;
- ??????? ?????? ?? ????????????? ????????;
2. ????? ????????????? ?????? ??? ?????? ? ????????????? ?? ?????????? ?????????? ???????????:
- ????????????? ? ?????? ? ?????????????;
- "???????? ?????" ? ?????? ?? ?????????????;
3. ?? ???????? ? ????????????? ???????? ??????? ????????:
- ???????, ??? ?????? ?? ?????????????
- ??????? "?????, ???"
4. ???????? ?????? ? ?????????????:
- ??????????? ?? ???? ?? ?? ??????.
- ??????? "???????? ?? ????????".
??????????? "?? ??? ???????? ? ????? ?????????, ? ??? ??? ?????????".
??????? ???????? ??? ?????? ? ?????????;
??????? ???????? ??? ?????? ? ??????????;
????? ??????, ??? ?????????? ???????? ??????????? ??????? ?? ???? ???????.
??????????? ?? ????:
- ????? ???? ?? ???????;
- ? ??????????? ? ??????????;
??????????? ?? ????????????? ??????????? ?? ??????:
- ????? ?????????????????? ??????;
- 5 ?????? ? ?????? ?? ????????????? ?????????????;
- ??????? "????? ? ???? ?????" ? ?????? ? ??????????????? ?????????????;
- ?????? ? ????????????? ?? ????????????.
5. ????? ????????? ?????? ??? ?????????? ?????:
- ????????????? ??????????? ?? ???????;
- ??????? ??????????????;
- ??????? ????????????? ???? ?? ????? ?????????? ?????????. ?????? ?? ???????;
- ?????? ???????? ?? ????? ?????????? ?????.
6. ????????? ??????????????:
- ?? ???????????? ?? ??????? ??????;
- ????????? ???????????? ????????? ????????? ? ?????? ?????;
- ?????? ???????????????? ? ??????????? ?? "??????" ???????????????
- ??????? ????????? ?????????? ??????, ?? ????????? ??? ??????????? ? "???????" ??????

??????? ?????????:??e???????? ????????- ??????-?????? ? 20-?? ?????? ???????? ???????? ??????? ???????? ?? ?????? ?? ????????????. ???? ?????? ? ?????? ??????????, ????????? ?? ??????????.

???????????????>
https://mailhint.com/training/192/praktika-roboti-z-zaperechennyami-yak-vikoristovuvati-bud-yak-zaperechennya-kl-nt-v-dlya-prosuvannya-prodazhu-scho-govoriti-koli-govoriti-yak-govoriti.htm

--
? ???????,
????
email-??????????
E-mail:info at mailhint.com
???????? ???????????? ?????????: +38(O44) 2?7-9O-O5
Web:https://mailhint.com

?? ?????????? ????????
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-netfilter-team/attachments/20230404/26433082/attachment-0001.htm>

From bootc at debian.org  Tue Apr  4 08:31:42 2023
From: bootc at debian.org (Chris Boot)
Date: Tue, 4 Apr 2023 08:31:42 +0100
Subject: [pkg-netfilter-team] Bug#1033902: ulogd2 debian package missing
 PCAP output plugin from upstream
In-Reply-To: <168054705830.970356.9181574037176137763.reportbug@localhost.localdomain>
References: <168054705830.970356.9181574037176137763.reportbug@localhost.localdomain>
 <168054705830.970356.9181574037176137763.reportbug@localhost.localdomain>
Message-ID: <a52ce256-747b-7694-0878-77f4b6806031@debian.org>

On 03/04/2023 19:37, Harald Welte wrote:
> However, I was surprised to see that the ulogd2 package both in Debian stable as well
> as unstable doesn't contain the PCAP output plugin.  Is that a conscious decision? I would
> think it's a rather useful feature to have.

It's included in the ulogd2-pcap package, which is separate in order to 
avoid the dependency on libpcap. It was this way even with ulogd 1.x.

Cheers,
Chris

-- 
Chris Boot
bootc at debian.org


From laforge at gnumonks.org  Tue Apr  4 09:15:12 2023
From: laforge at gnumonks.org (Harald Welte)
Date: Tue, 4 Apr 2023 10:15:12 +0200
Subject: [pkg-netfilter-team] Bug#1033902: ulogd2 debian package missing
 PCAP output plugin from upstream
In-Reply-To: <a52ce256-747b-7694-0878-77f4b6806031@debian.org>
References: <168054705830.970356.9181574037176137763.reportbug@localhost.localdomain>
 <a52ce256-747b-7694-0878-77f4b6806031@debian.org>
 <168054705830.970356.9181574037176137763.reportbug@localhost.localdomain>
Message-ID: <ZCvckN5Gq4xBpgkb@nataraja>

On Tue, Apr 04, 2023 at 08:31:42AM +0100, Chris Boot wrote:
> On 03/04/2023 19:37, Harald Welte wrote:
> > However, I was surprised to see that the ulogd2 package both in Debian stable as well
> > as unstable doesn't contain the PCAP output plugin.  Is that a conscious decision? I would
> > think it's a rather useful feature to have.
> 
> It's included in the ulogd2-pcap package, which is separate in order to
> avoid the dependency on libpcap. It was this way even with ulogd 1.x.

ugh.  Somehow that was too obvious. Sorry for the noise.

-- 
- Harald Welte <laforge at gnumonks.org>          https://laforge.gnumonks.org/
============================================================================
"Privacy in residential applications is a desirable marketing option."
                                                  (ETSI EN 300 175-7 Ch. A6)


From farinawati at kraftangan.gov.my  Thu Apr  6 18:24:53 2023
From: farinawati at kraftangan.gov.my (RUI)
Date: Fri, 7 Apr 2023 01:24:53 +0800 (MYT)
Subject: [pkg-netfilter-team] RE
Message-ID: <1042837994.873097.1680801893035.JavaMail.zimbra@kraftangan.gov.my>

We write to inquire if your company does have a project that needs funding. if yes, do get back to me with the project details.

Regards
Farina Wati