Re: [fwAnalog] Logs are empty on FreeBSD 4.7 Release

From: Balázs Bárány (balazs~AT~tud.at)
Date: Fri Dec 27 2002 - 20:01:26 CET

Next message: Adam Lofstedt: "RE: [fwAnalog] Logs are empty on FreeBSD 4.7 Release"
Previous message: Adam Lofstedt: "[fwAnalog] Logs are empty on FreeBSD 4.7 Release"
In reply to: Adam Lofstedt: "[fwAnalog] Logs are empty on FreeBSD 4.7 Release"
Next in thread: Adam Lofstedt: "RE: [fwAnalog] Logs are empty on FreeBSD 4.7 Release"
Reply: Adam Lofstedt: "RE: [fwAnalog] Logs are empty on FreeBSD 4.7 Release"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hello,

Adam Lofstedt <adaml~AT~visimation.com> [2002-12-26 23:47]:
> It looks like ipmon is logging the blocked packets correctly to the file
> /var/log/ipflog. I am not sure why fwanalog results are empty. Can
Does the following command print any lines?

egrep -h " -> .+ PR.+len" /var/log/ipflog

This is what fwanalog searches for. Lines that match this pattern are converted to the HTTP log format using perl. If something goes wrong in that step, the wrong lines are written to $outdir/analog.err.

Also, has the user you are running fwanalog as read permissions on the ipflog file?

Regards

-- 
_________________________________________________________________________
Balázs Bárány       balazs~AT~tud.at        http://tud.at       ICQ 10747763

A good engineer will make considerable effort to avoid additional effort.

Next message: Adam Lofstedt: "RE: [fwAnalog] Logs are empty on FreeBSD 4.7 Release"
Previous message: Adam Lofstedt: "[fwAnalog] Logs are empty on FreeBSD 4.7 Release"
In reply to: Adam Lofstedt: "[fwAnalog] Logs are empty on FreeBSD 4.7 Release"
Next in thread: Adam Lofstedt: "RE: [fwAnalog] Logs are empty on FreeBSD 4.7 Release"
Reply: Adam Lofstedt: "RE: [fwAnalog] Logs are empty on FreeBSD 4.7 Release"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.5 : Mon Dec 30 2002 - 20:42:02 CET