Project

General

Profile

« Previous | Next » 

Revision 87c20eb5

Added by Bill Marquette over 16 years ago

Ticket #1456 - drop one level of verbosity in tcpdump. Some protocols
will still decode to multi-line message - not an easy fix. Doesn't
appear to break non-raw log display

Add VRRP as a protocol type in the decode

View differences:

etc/inc/filter.inc
55 55

  
56 56
	mute_kernel_msgs();
57 57

  
58
	$pid = `ps awwwux | grep -v "grep" | grep "tcpdump -vv -l -n -e -ttt -i pflog0"  | awk '{ print $2 }'`;
58
	$pid = `ps awwwux | grep -v "grep" | grep "tcpdump -v -l -n -e -ttt -i pflog0"  | awk '{ print $2 }'`;
59 59
	if(!$pid)
60
		mwexec_bg("/usr/sbin/tcpdump -vv -l -n -e -ttt -i pflog0 | logger -t pf -p local0.info");
60
		mwexec_bg("/usr/sbin/tcpdump -v -l -n -e -ttt -i pflog0 | logger -t pf -p local0.info");
61 61

  
62 62
	unmute_kernel_msgs();
63 63

  
......
3394 3394

  
3395 3395
}
3396 3396

  
3397
?>
3397
?>
usr/local/www/diag_logs_filter.php
109 109
			$flent['proto'] = "IGMP";
110 110
		else if(stristr(strtoupper($logent), "CARP") == true)
111 111
			$flent['proto'] = "CARP";
112
		else if(stristr(strtoupper($logent), "VRRP") == true)
113
			$flent['proto'] = "VRRP";
112 114
		else if(stristr(strtoupper($logent), "PFSYNC") == true)
113 115
			$flent['proto'] = "PFSYNC";
114 116
		else if(stristr($logent, "sack") == true)
usr/local/www/system.php
62 62
if($pconfig['timezone'] <> $_POST['timezone']) {
63 63
	/* restart firewall log dumper helper */
64 64
	require_once("functions.inc");
65
	$pid = `ps awwwux | grep -v "grep" | grep "tcpdump -vv -l -n -e -ttt -i pflog0"  | awk '{ print $2 }'`;
65
	$pid = `ps awwwux | grep -v "grep" | grep "tcpdump -v -l -n -e -ttt -i pflog0"  | awk '{ print $2 }'`;
66 66
	if($pid) {
67 67
		mwexec("kill $pid");
68 68
		usleep(1000);

Also available in: Unified diff