specter8

Usage

Overview

specter connects to the netlink device of the Linux kernel and reads messages from the netfilter that get queued with the iptables ULOG target. For this to work you have to compile the ULOG target into your kernel or load the respective module.

The received messages can be logged into files or into a mySQL or PostgreSQL database. Possibilities are based on dynamically loadable plugins, which are shipped along with specter package.

Options

-d, --daemon

fork specter into background (start as daemon)

-c <filename>, --configfile <filename>

use <filename> as configuration file instead of /etc/specter.conf

-u <username>, --uid <username>

This option tells specter to drop its privileges and run as given user.

-g <group>, --gid <group>

This option tells specter to drop its privileges and run as given group.

-h, --help

show usage information

-V, --version

show version information and copyright

Files

/etc/specter.conf
/var/log/specter.log