|
From: GLORIA M. M. <gm...@aq...> - 2005-06-09 10:48:08
|
Have you use iptables log anlyzer with de log generated by = fwbuilder? My log file has lines like this: kernel: RULE 15 -- DENY IN=3Deth1 OUT=3D = MAC=3Dff:ff:ff:ff:ff:ff:00:0a:5e:4f:44:1a:08:00 SRC=3D138.100.42.140 = DST=3D138.100.42.255 LEN=3D78 TOS=3D0x00 PREC=3D0x00 TTL=3D128 ID=3D8203 = PROTO=3DUDP SPT=3D137 DPT=3D137 LEN=3D58=20 Jun 5 04:15:09 tadao kernel: RULE 15 -- DENY IN=3Deth1 OUT=3D = MAC=3Dff:ff:ff:ff:ff:ff:00:0a:5e:4f:44:1a:08:00 SRC=3D138.100.42.140 = DST=3D138.100.42.255 LEN=3D202 TOS=3D0x00 PREC=3D0x00 TTL=3D128 = ID=3D8204 PROTO=3DUDP SPT=3D138 DPT=3D138 LEN=3D182=20 Jun 5 04:15:09 tadao kernel: RULE 15 -- DENY IN=3Deth1 OUT=3D = MAC=3Dff:ff:ff:ff:ff:ff:00:0a:5e:4f:44:1a:08:00 SRC=3D138.100.42.140 = DST=3D138.100.42.255 LEN=3D78 TOS=3D0x00 PREC=3D0x00 TTL=3D128 ID=3D8205 = PROTO=3DUDP SPT=3D137 DPT=3D137 LEN=3D58=20 Jun 5 04:15:10 tadao kernel: RULE 15 -- DENY IN=3Deth1 OUT=3D = MAC=3Dff:ff:ff:ff:ff:ff:00:0a:5e:4f:44:1a:08:00 SRC=3D138.100.42.140 = DST=3D138.100.42.255 LEN=3D78 TOS=3D0x00 PREC=3D0x00 TTL=3D128 ID=3D8206 = PROTO=3DUDP SPT=3D137 DPT=3D137 LEN=3D58=20 Jun 5 04:15:10 tadao kernel: RULE 15 -- DENY IN=3Deth1 OUT=3D = MAC=3Dff:ff:ff:ff:ff:ff:00:0a:5e:4f:44:1a:08:00 SRC=3D138.100.42.140 = DST=3D138.100.42.255 LEN=3D78 TOS=3D0x00 PREC=3D0x00 TTL=3D128 ID=3D8207 = PROTO=3DUDP SPT=3D137 DPT=3D137 LEN=3D58 So i think the format is not the same that the feed.pl script uses. Anyone has done the script for this format? |