|
From: Unsub S. <uns...@in...> - 2020-04-28 09:18:10
|
Hi, I recently installed ModSecurity on Ubuntu 18.04.4 LTS following the usual instruction available at the following links; however this time around I have noticed that ModSecurity Audit Logs are printing out some kind of hexcode instead of the source and destination IP addresses in Section-A of the log file. What could be the cause of this? The hex does not seem to be valid IPv4 addresses either. https://github.com/SpiderLabs/ModSecurity/tree/v3/master https://github.com/SpiderLabs/ModSecurity/wiki/Compilation-recipes-for-v3.x#ubuntu-1504 Sample: [28/Apr/2020:02:04:59 +0500] 1588021499 0x55a9de249950 49272 0x55a9c93bb0d0 443 [28/Apr/2020:02:05:00 +0500] 1588021500 0x55a9ec102e50 49272 0x55a9ec20a4b0 443 [28/Apr/2020:02:05:01 +0500] 1588021501 0x55a9d36b63e0 49272 0x55a9ed0e6ee0 443 [28/Apr/2020:02:05:01 +0500] 1588021501 0x55a9bcb8cb00 49272 0x55a9bd55f780 443 -- *Unsub Shafiq* |
