Firewall Log does not display logs for IGMP
I have a rule that that deals with multicast packets (to 22.214.171.124/4).
There are lines in /var/log/filter.log for packets that match that rule, but they are not displayed on the Firewall Log GUI.
It seems that IGMP protocol packets are not handled by parse_filter_line.
#2 Updated by Phillip Davis over 6 years ago
Note: In filter_log.inc parse_filter_line() there is also code that tries to handle protocol 112 CARP (around line 244). I suspect that the same issue (of not having a src and dst IP set) will cause any protocol 112 CARP packets in the firewall log to not display on the GUI.