This is the deprecated ipv4-only predecessor of the NFLOG target.

It provides userspace logging of matching packets.  When this

target is set for a rule, the Linux kernel will multicast this packet

through a

.IR netlink 

socket. One or more userspace processes may then subscribe to various 

multicast groups and receive the packets.

Like LOG, this is a "non-terminating target", i.e. rule traversal

continues at the next rule.

.TP

\fB\-\-ulog\-nlgroup\fP \fInlgroup\fP

This specifies the netlink group (1-32) to which the packet is sent.

Default value is 1.

.TP

\fB\-\-ulog\-prefix\fP \fIprefix\fP

Prefix log messages with the specified prefix; up to 32 characters

long, and useful for distinguishing messages in the logs.

.TP

\fB\-\-ulog\-cprange\fP \fIsize\fP

Number of bytes to be copied to userspace.  A value of 0 always copies

the entire packet, regardless of its size.  Default is 0.

.TP

\fB\-\-ulog\-qthreshold\fP \fIsize\fP

Number of packet to queue inside kernel.  Setting this value to, e.g. 10

accumulates ten packets inside the kernel and transmits them as one

netlink multipart message to userspace.  Default is 1 (for backwards

compatibility).

.br