[fwAnalog] fwanalog 0.6.9 - FreeBSD - ipfw - FIX

From: Security <security~AT~csrc.com>
Date: Fri May 18 2007 - 20:38:38 CEST


There is a typo in the perl parser for ipfw logs. an end of line wrap "\" appears to have been combined with an "$outdir" creating a literal "\$outdir". The following is a diff of the fix.

I sent a message to the FreeBSD ports maintainer.

Thanks

> # diff -ruN fwanalog.dist fwanalog
> --- fwanalog.dist       Fri May 18 00:23:19 2007
> +++ fwanalog    Fri May 18 00:41:21 2007
> @@ -993,7 +993,8 @@

> fi
>
> # 1 2 3 4 5 6 7 8 9 10 11 12 13
> - $perl -pwe "s!^(\d+) +(\w+) +(\d+) ([0-9:]+) .+(Deny|Reject) ([\w-]+) ([0-9.]+):(\d*) ([0-9.]+):(\d*) ([\w-]+) ([\w-]+) ([\w-]+)\$!\$7 - - [\$3/\$2/\$1:\$4 $timezone] \"GET /$reqhost/\$6/\$10/ HTTP/1.0\" 200 1 \"http://\$8/\" \"\" 0 \$13 !" \$outdir/fwanalog.current.withyear > $outdir/fwanalog.current.log > + $perl -pwe "s!^(\d+) +(\w+) +(\d+) ([0-9:]+) .+(Deny|Reject) ([\w-]+) ([0-9.]+):(\d*) ([0-9.]+):(\d*) ([\w-]+) ([\w-]+) ([\w-]+)\$!\$7 - - [\$3/\$2/\$1:\$4 $timezone] \"GET /$reqhost/\$6/\$10/ HTTP/1.0\" 200 1 \"http://\$8/\" \"\" 0 \$13 !" \ > + $outdir/fwanalog.current.withyear > $outdir/fwanalog.current.log
>
> # $outdir/fwanalog.current.log now contains the data in the Analog URL format.
> }

Received on Fri May 18 20:39:15 2007

This archive was generated by hypermail 2.1.8 : Sun Jul 01 2007 - 10:22:08 CEST