Re: [fwAnalog] Logs are empty on FreeBSD 4.7 Release

From: Balázs Bárány (balazs~AT~tud.at)
Date: Tue Dec 31 2002 - 11:18:12 CET

• Next message: Balázs Bárány: "[fwAnalog] fwanalog 0.6.2 released"
• Previous message: Adam Lofstedt: "RE: [fwAnalog] Logs are empty on FreeBSD 4.7 Release"
• In reply to: Adam Lofstedt: "RE: [fwAnalog] Logs are empty on FreeBSD 4.7 Release"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hello,

• Adam Lofstedt <adaml~AT~visimation.com> [2002-12-30 20:38]:
  > and am rotating the logs. Instead of getting zero results, all the
  > results are reported as corrupted.
  I don't have FreeBSD and can't test your configuration. However, you could send me a part of your firewall logfile (with sanitized IP addresses if you wish) in private e-mail and I could look why it's not working.

A FreeBSD user contributed the freebsd parser and it is possible that a newer version has a changed format.

> I am using the "ipf" logformat in the opts file. I have tried to log
Have you also tried the "freebsd" format? It is different from "ipf".

> ipmon_flags="-Dsvn"
> ...which should resolve host names and log some other things about TCP
You shouldn't resolve host names in the log, as fwanalog does that itself.

Regards

-- 
_________________________________________________________________________
Balázs Bárány       balazs~AT~tud.at        http://tud.at       ICQ 10747763

A good engineer will make considerable effort to avoid additional effort.

• Next message: Balázs Bárány: "[fwAnalog] fwanalog 0.6.2 released"
• Previous message: Adam Lofstedt: "RE: [fwAnalog] Logs are empty on FreeBSD 4.7 Release"
• In reply to: Adam Lofstedt: "RE: [fwAnalog] Logs are empty on FreeBSD 4.7 Release"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.5 : Wed Jan 08 2003 - 17:22:03 CET