similar to: [Bug 977] ulogd_inppkt_NFLOG.c:503 forcing unbind of existing log handler for protocol

https://bugzilla.netfilter.org/show_bug.cgi?id=977 Netbug <b1b30ee4 at opayq.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|INVALID |--- --- Comment #27 from Netbug <b1b30ee4 at opayq.com>

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #6 from Netbug <b1b30ee4 at opayq.com> --- I upgraded to ulogd 2.0.4 & kernel 3.17.2 but these did not make a difference, here's how the output looks now; Sat Nov 1 17:07:03 2014 <5> ulogd.c:843 building new pluginstance stack:

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #5 from Netbug <b1b30ee4 at opayq.com> --- I'm now using Shorewall 4.6.4.3, but I don't think it makes a difference. I was thinking to try kernel 3.17,2, but not sure it's going to make any difference either. I'm not sure how this is a configuration error, I've tried everything with no positive results,

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #7 from Netbug <b1b30ee4 at opayq.com> --- TYPO before; If you notice you'll see it says log2 on top, then log21 below, both are getting these messages. -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL:

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #8 from Netbug <b1b30ee4 at opayq.com> --- CRAP my typing sorry... If you notice you'll see it says log2 on top, then LOG1 below... -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL:

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #9 from Netbug <b1b30ee4 at opayq.com> --- Hi Eric, Have you had a chance to look at this? I know you're probably really busy and have more important things to deal with, but I could really use some help getting this to work because it doesn't. This is not a end-user configuration error on my end. I really need my

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #11 from Netbug <b1b30ee4 at opayq.com> --- Hi Eric, Thanks for getting back to me, really appreciate it. I'm not using NFLOG at the moment, so let me know if the iptables-save is ok, without using it at the moment, along with the cat? I've attached two logs for each... thanks -- You are receiving this mail

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #12 from Netbug <b1b30ee4 at opayq.com> --- Created attachment 455 --> https://bugzilla.netfilter.org/attachment.cgi?id=455&action=edit iptables-save -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL:

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #13 from Netbug <b1b30ee4 at opayq.com> --- Created attachment 456 --> https://bugzilla.netfilter.org/attachment.cgi?id=456&action=edit nf_log -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL:

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #15 from Netbug <b1b30ee4 at opayq.com> --- Ok I was thinking this so I set everything back to NFLOG, I've attached; iptables-save_nflog Here's the cat /proc/net/netfilter/nf_log; 0 NONE (nfnetlink_log) 1 NONE (nfnetlink_log) 2 nfnetlink_log (nf_log_ipv4,nfnetlink_log) 3 NONE (nfnetlink_log) 4 NONE

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #16 from Netbug <b1b30ee4 at opayq.com> --- Created attachment 457 --> https://bugzilla.netfilter.org/attachment.cgi?id=457&action=edit iptables-save_nflog -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL:

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #17 from Netbug <b1b30ee4 at opayq.com> --- I screwed up the iptables-save_nflog, don't use that one I'm going to brb and upload a new one, my bad... -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL:

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #18 from Netbug <b1b30ee4 at opayq.com> --- Hi Eric, Grab this one one instead I've attached; iptables-save_nflog_2 -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL:

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #19 from Netbug <b1b30ee4 at opayq.com> --- Created attachment 458 --> https://bugzilla.netfilter.org/attachment.cgi?id=458&action=edit iptables-save_nflog_2 -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL:

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #20 from Netbug <b1b30ee4 at opayq.com> --- Hi Eric, The new log; iptables-save_nflog_2 and the output I pasted for, cat /proc/net/netfilter/nf_log; All this is good now? -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL:

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #22 from Netbug <b1b30ee4 at opayq.com> --- In shorewall I have NFLOG listed for the shorewall.conf and the policy file, this is the only place I put in the word NFLOG... Please see these attachements... -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #23 from Netbug <b1b30ee4 at opayq.com> --- Created attachment 459 --> https://bugzilla.netfilter.org/attachment.cgi?id=459&action=edit policy -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL:

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #24 from Netbug <b1b30ee4 at opayq.com> --- Created attachment 460 --> https://bugzilla.netfilter.org/attachment.cgi?id=460&action=edit shorewall.conf -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL:

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #25 from Netbug <b1b30ee4 at opayq.com> --- Oh crap maybe I did screw this up, I didn't realize I needed to change a group. So you're saying it's showing it on 0 now and it needs to be on 1? I remember reading this before; Use NFLOG as your log level, and as with ULOG you can specify the group NFLOG(1,0,1). NFLOG

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #29 from Netbug <b1b30ee4 at opayq.com> --- Hi Eric, So it's ok to use; stack=log2:NFLOG,base1:BASE,ifi1:IFINDEX,ip2str1:IP2STR,print1:PRINTPKT,emu1:LOGEMU With #bind=1 commented out? I thought if you're going to use log2 then bind=1 had to be uncommented? -- You are receiving this mail because: You are watching