specter
  version: 1.5
  last modified: 20 January 2012
  homepage: http://joker.linuxstuff.pl/specter/


  specter is a userspace logging facility for Linux. It uses netfilter
  ULOG target for packets gathering, and then passes them to attached
  plugins. Modularized structure makes specter very flexible and robust.
  It's based on ulogd, but has improved design and wider functionality.


CONTENTS
  Package consists of three parts: core, ulog library, and plugins.
  Library takes care about kernel-process communication via netlink
  socket, core manages all structures and plugins actually interpret
  and stores packets.

  Plugins are the heart of specter. Divided into two groups: input and
  output. Plugins from the first group receive a packet and process its
  contents. Output plugins base on this data and take appropriate action
  (like logging, or running application).

  There's also quite verbose documentation in doc/ subdirectory, read
  it if you want to learn how to install and use specter.


INSTALLATION
  See INSTALL file in the main source directory.


DOCUMENTATION
  Documentation is available online at
  <http://joker.linuxstuff.pl/specter/docs.html>. You can also generate
  documentation yourself right from the source tree, using the following
  command:

    make -C doc

  You will need linuxdoc-tools for this to work though.


CREDITS
  specter was written by Michal Kwiatkowski <constant.beta@gmail.com>,
  based on ulogd 1.02 code by Harald Welte.

  I would also want to thank following people for their support, in any
  form (comments, bugreports, ideas):
    Jesper Dangaard Brouer
    Robert Gogolok
    Igor Iorjev
    Grzegorz Bizon
    Wolfram Schlich

