From: Fabio Panigatti (ml-panigatti~AT~minerprint.it)
Date: Tue Feb 17 2004 - 14:16:10 CET
I run fwanalog on gentoo with metalog. Since metalog log format is slightly different from syslog log format, fwanalog.sh code require a simple, little patch to the perl regexp at line 568 (0.6.2) to work:
"s!^(\d+) +(\w+) +(\d+) ([0-9:]+) [^:]+: ?([a-zA-Z0-9/.,:_-]*).*IN=(.*)
^The colon prevent fwanalog to correctly parse metalog log format, which is in the form (already mangled with year addition):
2004 Jan 30 11:03:06 [kernel] ETH2CATCHALL IN=eth2 OUT= MAC=00:30... ^^^^^^^^
Many thanks to balazs for his work.
This archive was generated by hypermail 2.1.5 : Thu Mar 18 2004 - 17:02:04 CET