ulog: how to read?

[Matthew Flaschen]

Luca Ferrari wrote:
> Hi all,
> I've got an ubuntu machine that is running as firewall with iptables and ulog, 
> but I'm not able to read the information stored in the database.
> For instance:
> ulog=# select ip_saddr, ip_daddr from ulog limit 10;
>   ip_saddr  |  ip_daddr
> ------------+------------
>  2130706433 | 2130706433
>  2130706433 | 2130706433
>  2130706433 | 2130706433
>  1427304323 | 1427304325
>  2130706433 | 2130706433
>  2130706433 | 2130706433
>  2130706433 | 2130706433
>  2130706433 | 2130706433
>  2130706433 | 2130706433
>  1427304323 | 1427304325
> (10 rows)
> 
> 
> how should I cast such address to be displayied as IPs? Anyone can point me to 
> a tutorial or a documentation that explains how to read the ulog information?

It's a decimal IP.  There are plenty of converters, like
http://www.toastedspam.com/decodeip .  I don't know of a good script for
this, though.

Matthew Flaschen