I've managed to bring ulogd2 to a state where it finally does something. The dynamic key resolval/linking of plugin stacks is working, and some basic plugins (NFLOG input, IPV4 packet interpreter (BASE), LOGEMU output) are working, too.
So the remaining work will mostly be in the plugin area. We're currently missing
- ctnetlink input
- packet->flow aggregation (basically 'nacctd')
- IPFIX input and output
- convert the old mysql/pgsql/sqlite output plugins
If you're interested, patches are always welcome. The code can be downloaded via svn from http://svn.gnumonks.org/branches/ulog/ulogd2/.