[Nufw-devel] nuauth not updating end_timestamp connectly in mysql ulog table.

[Glen Ogilvie]

Hi,

I've been looking at nuauth and noticed that it does not seem to be updating 
the end_timestamp when using connection tracking.

The queries I see in the database when connections close are:

UPDATE ulog SET end_timestamp=FROM_UNIXTIME(0), state=3, packets_in=14, 
packets_out=16, bytes_in=2508, bytes_out=14158 WHERE (ip_saddr=176160858 AND 
ip_daddr=3232290298 AND tcp_sport='38463' AND tcp_dport='8080' AND (state='2' 
OR state='1'))                                                                  
     

This is happening with: nufw-nuauth-2.2.21

I think they query that is being built is on line: 784 of 
src/nuauth/modules/log_mysql/mysql.c

It looks like element->timestamp must be 0 for some reason, or cannot be 
converted to "%lu"

To test this, make sure you have connection tracking working, so you are 
getting bytes_in and bytes_out updated, then see what the value of 
end_timestamp is.  It should not be null or 1970.

Has this bug been found before?

Regards
-- 
Glen Ogilvie
Open Systems Specialists
Level 1, 162 Grafton Road
http://www.oss.co.nz/

Ph: +64 9 984 3000
Mobile: +64 21 684 146
GPG Key: ACED9C17