Re: [Wallfire-users] Using wflogs/cisco_pix for ip accounting
Brought to you by:
eychenne
|
From: Herve E. <rv...@wa...> - 2003-04-27 00:45:51
|
On Thu, Apr 24, 2003 at 11:33:06PM +0200, Friedhelm Duesterhoeft wrote: Hi, > I'm logging at info level with my pix. At this level bytes transfered are > logged, however adding --datalen=yes only gives me "length 0" entries in the > report. It seems, you are not evaluating PIX-6 lines. Yes, probably not. Only PIX-4 and PIX-5 seem to be currently supported. > If it's not a bug do you plan to parse these lines also in later releases? Please provide some link to the format "grammar" for PIX-6 or with representative examples of what the PIX-6 format can be, and it's likely that it may be supported in the next release if it's as easy to parse as PIX 4 and 5. Herve -- _ (°= Hervé Eychenne //) v_/_ WallFire project: http://www.wallfire.org/ |