Re: [mod-security-users] tying log entries to rules

[Peter W. <prw...@gm...>]

> Here's a little something I threw together:
> http://orderamidchaos.com/modsec/modsec_auditlog_parser
>=20
> Use it like this:
>  ./modsec_auditlog_parser < /var/log/apache2/modsec_audit_log |less

I wrote something similar:

http://prwdot.org/code/modsecauditlogparse.txt

But it's more quick and dirty... you are welcome to use the code if it
suits you.

Peter
--=20
Peter R. Wood | email: prw...@gm... | blog: http://prwdot.org/