Actions
Bug #4109
closedsquid package doesn't include hostname when logging remotely
Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
Snort
Target version:
-
Start date:
12/13/2014
Due date:
% Done:
0%
Estimated time:
1.00 h
Plus Target Version:
Affected Version:
2.1.5
Affected Plus Version:
Affected Architecture:
Description
Squid doesn't include the hostname when logging remotely (e.g.):
<33>Dec 13 13:40:18 snort2160: [120:3:1] (http_inspect) NO CONTENT-LENGTH OR TRANSFER-ENCODING IN HTTP RESPONSE [Classification: Unknown Traffic] [Priority: 3] {TCP} 192.168.2.1:80 -> 192.168.2.102:21832
But it should include the hostname between the date and the process (snort) in this case.
Actions