Révision 87c20eb5
Ajouté par Bill Marquette il y a plus de 16 ans
etc/inc/filter.inc | ||
---|---|---|
55 | 55 |
|
56 | 56 |
mute_kernel_msgs(); |
57 | 57 |
|
58 |
$pid = `ps awwwux | grep -v "grep" | grep "tcpdump -vv -l -n -e -ttt -i pflog0" | awk '{ print $2 }'`;
|
|
58 |
$pid = `ps awwwux | grep -v "grep" | grep "tcpdump -v -l -n -e -ttt -i pflog0" | awk '{ print $2 }'`; |
|
59 | 59 |
if(!$pid) |
60 |
mwexec_bg("/usr/sbin/tcpdump -vv -l -n -e -ttt -i pflog0 | logger -t pf -p local0.info");
|
|
60 |
mwexec_bg("/usr/sbin/tcpdump -v -l -n -e -ttt -i pflog0 | logger -t pf -p local0.info"); |
|
61 | 61 |
|
62 | 62 |
unmute_kernel_msgs(); |
63 | 63 |
|
... | ... | |
3394 | 3394 |
|
3395 | 3395 |
} |
3396 | 3396 |
|
3397 |
?> |
|
3397 |
?> |
usr/local/www/diag_logs_filter.php | ||
---|---|---|
109 | 109 |
$flent['proto'] = "IGMP"; |
110 | 110 |
else if(stristr(strtoupper($logent), "CARP") == true) |
111 | 111 |
$flent['proto'] = "CARP"; |
112 |
else if(stristr(strtoupper($logent), "VRRP") == true) |
|
113 |
$flent['proto'] = "VRRP"; |
|
112 | 114 |
else if(stristr(strtoupper($logent), "PFSYNC") == true) |
113 | 115 |
$flent['proto'] = "PFSYNC"; |
114 | 116 |
else if(stristr($logent, "sack") == true) |
usr/local/www/system.php | ||
---|---|---|
62 | 62 |
if($pconfig['timezone'] <> $_POST['timezone']) { |
63 | 63 |
/* restart firewall log dumper helper */ |
64 | 64 |
require_once("functions.inc"); |
65 |
$pid = `ps awwwux | grep -v "grep" | grep "tcpdump -vv -l -n -e -ttt -i pflog0" | awk '{ print $2 }'`;
|
|
65 |
$pid = `ps awwwux | grep -v "grep" | grep "tcpdump -v -l -n -e -ttt -i pflog0" | awk '{ print $2 }'`; |
|
66 | 66 |
if($pid) { |
67 | 67 |
mwexec("kill $pid"); |
68 | 68 |
usleep(1000); |
Formats disponibles : Unified diff
Ticket #1456 - drop one level of verbosity in tcpdump. Some protocols
will still decode to multi-line message - not an easy fix. Doesn't
appear to break non-raw log display
Add VRRP as a protocol type in the decode