Re: [fwAnalog] configuration question

• Next message: Balázs Bárány: "[fwAnalog] fwanalog 0.2.1 released"
• Previous message: David Mitchell: "[fwAnalog] configuration question"
• In reply to: David Mitchell: "[fwAnalog] configuration question"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hello,

• David Mitchell <davidm~AT~coop-cdc.com> [2001-05-04 07:55]:
  > excerpt below, most of the log entries are discarded as corrupt. This
  > seems to be because they don't have the MAC= field.
  Could you send examples from the original log files and what fwanalog converts them to?

We had a problem with MAC= entries where there was no content. After that, I modified the regexp to accept empty MAC= entries. Is there a MAC= entry in your /var/log/messages? The IPTables regexp is here on line 182: http://tud.at/cgi-bin/viewcvs.cgi/fwanalog/fwanalog.sh?annotate=1.8

> Only a few entries in the log contain MAC= data. What am I doing wrong?
If the MAC= isn't in your /var/log/messages, modify the regexp in fwanalog.sh on line 182 from " MAC=" to " ?M?A?C?=?" so that it is not enforced, and tell us if it works after that.

By the way, Analog 5.0 is ready. I will need to change fwanalog for it - hopefully I find some time on the weekend and can make a new release.

Thank you

-- 
_________________________________________________________________
Balázs Bárány     balazs~AT~tud.at     http://tud.at    ICQ 10747763

Computers. You can't live with them, you can't live without them.

• Next message: Balázs Bárány: "[fwAnalog] fwanalog 0.2.1 released"
• Previous message: David Mitchell: "[fwAnalog] configuration question"
• In reply to: David Mitchell: "[fwAnalog] configuration question"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 22:22:04 CEST